In this video, we will go through medium and high difficulty SQL injection challenges on dam vulnerable
web application.
In the previous video on SQL injection.
We have already seen that if we put any ID in the user ID field, it lists down all the information
on the specific category or user.
Now to solve medium difficulty challenge, go to settings and set the difficulty to medium.
This security level has a mitigation technique implemented.
It uses MySQL real escape string function.
While this does not allow the codes in the passed value.
In our case we do not need them and we can simply bypass it with providing the payload without the apostrophe.
We need to right click on the page and inspect the page and we need to use the payload within the select
element.
And once you click submit, you will get the results.
So we are on our way.
Just change the security level to medium.
The move to the SQL injection challenges.
And here you can see that we can only select user IDs from the drop down list.
And if we submit any user ID, we get information.
Now, right click on the page and inspect the page.
Navigate to the user ID dropdown menu.
And within the select element, the any value use the payload as shown on the screen without the apostrophe
or quotes.
And you can see that information of all users is dumped out.
No for high difficulty, go to settings and set the difficulty to high.
The high severity SQL injection example requires entering user ID on another page.
However, this does not change the fact that the vulnerability exists and we can use the same payload
as we used for the low security level.
Once you open the page, submit the page on the new tab and you will get the results.
So back on set, the security level too high.
And move to SQL injection tab.
Once you click, change your link.
A new tab will open.
Once you provide the session IDs here, you will get the information displayed in the previous step.
So just use the payload here as shown on the screen.
And click on Submit.
And the information is dumped on the main tab.
So we have successfully completed medium and high challenges on SQL injection on Dvwa.