SQL Injection Courses and Certifications

Great Learning

SQL Injection Explained - Understanding Attacks and Prevention

Comprehensive guide to SQL injection attacks: types, vulnerabilities, and prevention techniques. Learn to identify, exploit, and protect against database security threats through practical examples and best practices.

• YouTube
• 49 minutes
• On-Demand
• Free Video

HackerSploit

SQL Injection 101 - Pentesting Diaries

Explore SQL injection techniques and tools in this weekly pentesting series. Learn attack methods, tool usage, and optimization for deeper understanding and improved efficiency.

• YouTube
• 1 hour 20 minutes
• On-Demand
• Free Video

CryptoCat

SQL Injection Tutorial - Union and Blind Attacks in Gin and Juice Shop

Master SQL injection techniques through hands-on exploitation of Portswigger's Gin and Juice shop, covering union and blind attacks, database enumeration, and automated tools like SQLMap and Burp Suite.

• YouTube
• 34 minutes
• On-Demand
• Free Video

CryptoCat

Websocket SQL Injection and JWT Token Exploitation Tutorial

Master web security techniques through hands-on exploitation of websocket SQL injection, IDOR vulnerabilities, and JWT token manipulation in a CTF challenge walkthrough focused on practical bug hunting skills.

• YouTube
• 11 minutes
• On-Demand
• Free Video

DEFCONConference

SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level

Explore advanced SQL injection techniques through protocol-level query smuggling, revealing how attackers can bypass security measures and exploit database connections for authentication breaches and data theft.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Injecting Brains Into Blind SQL Injection - Optimizing Data Exfiltration

Innovative approach to optimize Blind SQL Injection using Machine Learning and statistics. Introduces Hakuin, a tool that significantly improves exfiltration speed for database schemas and content compared to standard methods.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Mirror Mirror - Reflected PDF Attacks Using SQL Injection

Explore innovative techniques for exploiting SQL injection vulnerabilities to launch reflected PDF attacks, enhancing your understanding of web application security.

• YouTube
• 51 minutes
• On-Demand
• Free Video

OWASP Foundation

Over 20 Years of SQL Injection Attacks - Refining Web Attack Detection Using Data Mining Techniques

Explore data mining techniques to refine SQL injection attack detection using CDN logs, NLP, and clustering for improved web security and emerging threat identification.

• YouTube
• 25 minutes
• On-Demand
• Free Video

INFOSEC TRAIN

Web Application Security: The Secret to Hack-Proof Apps - SQL Injection - Part 2

Discover step-by-step methods to secure web applications from SQL injection threats. Learn to identify vulnerabilities, exploit techniques, and implement effective prevention strategies for robust security.

• YouTube
• 1 hour 49 minutes
• On-Demand
• Free Video

Cooper

SQL Injection Isn't Dead - Smuggling Queries at the Protocol Level

Dive into advanced SQL injection techniques and protocol-level query smuggling, exploring sophisticated database security vulnerabilities and modern attack vectors.

• YouTube
• 28 minutes
• On-Demand
• Free Video

BSidesCharm

SQL Injection is a Thing of the Past and Other Lies We Tell Ourselves

Discover why injection attacks like SQLi persist despite their age, accounting for 6.7% of open-source vulnerabilities, and learn modern solutions to combat these enduring security threats.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Satish C J

Understanding SQL Injection Attacks - Manual and Automated Methods

Discover how SQL injection attacks work through manual and automated techniques, while learning essential prevention methods like prepared statements and SQLmap for enhanced web security.

• YouTube
• 15 minutes
• On-Demand
• Free Video

DEFCONConference

Time-Based SQL Injection Techniques and Defense Strategies

Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.

• YouTube
• 25 minutes
• On-Demand
• Free Video

A03: Injection

Master injection vulnerabilities through hands-on SQL, XSS, and command injection exploits, then implement parameterization and validation defenses in a pastebin application.

• CodeSignal
• 2 hours
• On-Demand
• Free Certificate

A03: Injection

Master injection vulnerability prevention through SQL, XSS, and command injection mitigation techniques using parameterized queries, sanitization, and secure coding patterns.

• CodeSignal
• 2 hours
• On-Demand
• Free Certificate