So before we get started with our injection attacks I wanted to quickly show you the scoreboard.
So go ahead and navigate up to your local host makes you have a pound sign for its slash score dashboard
and you should get an achievement here for finding the hidden scoreboard so in this scoreboard area
you should have access to all the different types of vulnerabilities and all the different types of
rating.
So let's go ahead and I can show you all these and if we hit show All in minds lagging just a little
bit.
But this organizes it by alphabetical order.
So this is all the different challenges that you can come through attempt.
Now if there is a little university type hat over here it's a walkthrough it shows you an interactive
tutorial by clicking on the orange button here.
And there's also ways to click on these and get hints as well so you can do interactive challenges and
you can come in here and get hints if you're able to.
You're having issues finding some of these things.
So what we can do is for example with injection coming up we can say hey let's go ahead and hide all
these and just sort by injection and we could see OK.
There's a bunch of different injections in here.
Now we're not going to cover all these injections we're going to cover the basics of sequel injection.
So for example if we want to start with the basics we're probably don't want to start with the least
difficult.
So the two star here is the least difficult.
And guess what actually is a walkthrough for us too.
But we can go in it says logging with the administrators account.
OK well we had to figure out how to do that right.
But there's hints in here if we want to click on a hint and try to get hints or we could refer to the
the challenge solutions as well.
But this is what's nice it brings you right to injection.
It tells you about injection what it is.
Right.
You come up here it says here's what injection is and then it brings you down specifically to this one
and kind of gives you kind of gives you hints on what you might need to do here in order to log in with
the administrators account.
So with that being said the scoreboard is your best friend.
We're going to be covering a topic or two from each section from the scoreboard.
We'll talk about an overview.
We'll do a walkthrough and then we'll talk about defenses similar to what we did with the active directory
portion and this will just get you familiar.
That's all we are doing here remember this is not a full on web app of course.
This is more of a familiarity that where you have something to bring to an interview and something to
build upon.
So let's go ahead and move right into injections and we'll start focusing on this.
This one right here.
Log in and then and we'll talk about SQL injection attacks.