Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

In this video, we cover Lab #1 in the SQL injection track of the Web Security Academy. This lab contains an SQL injection vulnerability in the product category filter. To solve the lab, we perform a SQL injection attack that causes the application to display details of all products in any category, both released and unreleased.

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬

Python script:

Notes.txt document:

Web Security Academy Lab Exercise:

Rana's Twitter account:

Complete and Continue