null Delhi NCR Humla 11 February 2023 - SQL Injection ( Advanced Level) Register

Null offensive hacking hands-on training.

Proposed sessions for this event:

• Advanced SQL Injections by Sanchay Singh
• Advanced SQL Injections by Shashwat Tiwari
• Advanced SQL Injections by Harsh Verma

This is an invite-only event. The attendees will be shortlisted based on their replies filled in the google form - https://forms.gle/GjAeNK77Z84qYxWo8

Expected Audience Skill Level:
1. Knowledge of Basic Web Application PenTesting
2. Knowledge of Basic Bug Bounty Hunting

The team will give a brief about basic types of Injections and will quickly jump to advanced Injections.

Content Covered:

• Introduction
  - Basics to Injections
  - SQL Injection and its types

• Login and Union Based Injections
  - How login works
  - Login based injections
  - How URL parameter works
  - Exploiting information_Schema

• Blind SQL Injections
  - Finding parameter in BurpSuite Request
  - Exploiting Blind Injection using UNION
  - SQLMap and automation of Injections
  - SQLMap for finding Blind Injections

• Conditional Response Based SQL Injections
  - Finding parameter in the request
  - Setting up query for Conditional Response
  - Finding username from tables
  - Validation of length of data
  - Brute-forcing for data retrieval
  - SQL Injections by triggering errors

• SQL Injections by triggering time-delays
  - What are time-delays
  - How to exploit using time delays

• SQL Injection using Out-of-Band Techniques
  - Out of band techniques
  - Data Exfiltration
  - DNS Queries and other attacks

Prerequisites:

• A working Laptop
• BurpSuite Community Edition
• VirtualBox or any other Hypervisor platform
• Kali Linux