Southperry.net
SQL injection tutorial site - Printable Version

+- Southperry.net (https://www.southperry.net)
+-- Forum: Social (https://www.southperry.net/forumdisplay.php?fid=14)
+--- Forum: The Speakeasy (https://www.southperry.net/forumdisplay.php?fid=54)
+--- Thread: SQL injection tutorial site (/showthread.php?tid=42757)



SQL injection tutorial site - Dusk - 2011-06-06

A few years ago I was learning SQL and I stumbled upon a website that explained how SQL injection worked and taught you the basics of it so that you could learn to prevent it. It was a really interesting website; each page was protected with a password, and it had set up a database containing a few tables with intentional vulnerablities that you would have to exploit to advance to the next page, which contained more advanced information. It felt like one of those puzzle websites where you have to guess the URL of the next page to advance. I'd highly recommend it to anyone learning SQL.

I can't find this page anymore. Does anyone know what I'm talking about, or is anyone able to find it?


SQL injection tutorial site - Takebacker - 2011-06-06

Wow that sounds cool. I wanna know what this is too.


SQL injection tutorial site - Dusk - 2011-06-06

Never mind, found it.

http://sqlzoo.net/hack/ if curious.

If you've heard SQL injection being referred to as one of the most basic hacks, it really is. Anyone with a basic understanding of SQL can work out these puzzles. And hack Sony, apparently.

Edit: My bad, the website doesn't actually restrict your access to the next page, but it clues you in on what to do to retrieve additional info from the rudimentary database. It's possible to get all the usernames and passwords from the database.


SQL injection tutorial site - Luacake - 2011-06-07

It's like picking a lock. Virtually.

Maybe I'll have a more in depth look at it later.