Skip to content
SelfSec
Join the launch listLaunch list
SelfSec
Vulnerability field guide

SQL Injection

SQL injection is still one of the most damaging web vulnerabilities. Here is how it actually works, what an attacker can do with it, and the one fix that reliably stops it.

8 articles 36 min total Overview to advanced techniques

Start with the overview

SQL Injection6 min read

SQL Injection, Explained: From Login Bypass to Full Data Extraction

SQL injection is still one of the most damaging web vulnerabilities. Here is how it actually works, what an attacker can do with it, and the one fix that reliably stops it.

Read the overview

SQL Injection techniques

7 focused deep-dives
  1. 02 Boolean-Based BlindBoolean-Based Blind SQL Injection: Extracting Data One Bit at a Time 4 min
  2. 03 Error-BasedError-Based SQL Injection: Turning Database Errors Into Data 4 min
  3. 04 Out-of-BandOut-of-Band SQL Injection: Confirming a Blind Flaw Through DNS 5 min
  4. 05 Second-OrderSecond-Order SQL Injection: When Stored Input Detonates Later 4 min
  5. 06 Stacked QueriesStacked Queries: Running Multiple Statements Through One Injection 4 min
  6. 07 Time-Based BlindTime-Based Blind SQL Injection: Reading a Database Through the Clock 5 min
  7. 08 UNION-BasedUNION-Based SQL Injection: Appending Your Own Result Set 4 min