• Platform
    Ways to upskill
    • Courses Courses
    • Skill assessments Skill assessments
    • Labs LabsNEW
    • Hands-on learning Hands-on learning
    • Certification prep Certification prep
    • Team efficiency Team efficiency
    Skills for
    • Software development
    • IT ops
    • Info & cyber security
    • Cloud computing
    • Machine learning / AI
    • Data professional
    • See our entire course library
    Top Trending Paths
    Microsoft Azure Deployment
    Path
    Microsoft Azure Deployment
    • 4 Courses
    • 7 Hours
    • Skill IQ available Get your Skill IQ
    AWS Operations
    Path
    AWS Operations
    • 7 Courses
    • 14 Hours
    • Skill IQ available Get your Skill IQ
    Cleaning Data with R
    Path
    Cleaning Data with R
    • 5 Courses
    • 8 Hours
    • Skill IQ available Get your Skill IQ
    Core Python
    Path
    Core Python
    • 25 Courses
    • 44 Hours
    • Skill IQ available Get your Skill IQ
    Ruby Language Fundamentals
    Path
    Ruby Language Fundamentals
    • 7 Courses
    • 13 Hours
    • Skill IQ available Get your Skill IQ
    • See our entire course library
  • Products

    Build tech skills to drive results


    • What is Skills?
    • View plans

    Get insights into your workflow


    • What is Flow?
    • View plans
  • Resources
    Learn
    • Blog
    • Customer stories
    • Resource center
    • Guides
    • App download
    • Support
    Connect
    • Events
    • Webinars
    • Podcast
    Podcasts
    • All Hands on Tech
    • Perspectives in Leadership

    2022 Tech Forecast and
    Build Better Blueprint

    Prepare for shifts and trends in the industry
    Check it out
  • For IndividuaIs
  • Sign in
    Sign in with
    Skills Sign in Skills Sign in
    Sign in with
    Flow Sign in Flow Sign in
  • Try for free
×
AWS Labs
Labs badge iconLAB

Web Attacks: SQL Injection

In this lab, you’ll practice SQL injection. When you’re finished with this lab, you’ll have the ability to inject SQL into a web request to alter the query being delivered to the database.

* Our Labs are Available for Enterprise and Professional plans only.
Terms and conditions apply.
Contact sales
Labs - Web Attacks: SQL Injection

Lab info

Rating (34)
Level
Beginner
Duration
1h
Released
Jun 29, 2022

Lab author

Lab Author: Gavin Johnson-Lynn
Gavin Johnson-Lynn
Gavin has 20 years’ experience writing software in regulated environments and for global organisations. The last five years of his development career were spent with a focus on security, becoming the security lead for a significant payments project at a FTSE 100 company. He has experience with languages from COBOL to .Net and now often finds those skills useful when developing with Python. Gavin's experience of software security revealed a passion for security, leading him to become a speaker a... morend blogger on the subject. Gavin holds the Certified Secure Software Lifecycle Professional (CSSLP) and Scrum Master certifications and is currently part of an offensive security team, using his defensive knowledge to aid offensive security work.
  • Table of contents
  • What's a lab?
  • Prerequisites
Challenge

Getting Started in the Lab Environment

Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!

Challenge

Inject Commands into SQL Requests

Here you’ll learn how to identify a field which has a SQL injection vulnerability. You'll then use that field to modify the SQL query being sent to a database.

Challenge

Change Logic in SQL Syntax

Here you'll be more specific with your injected code. You’ll take known information about a user (e.g. email address) and log in as that user without knowing their password.

Challenge

The Last Challenge

Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.

Labs - code icon

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Labs - list icon

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Labs - analytic icon

Did you know?

On average, you retain 75% more of your learning if you get time for practice.

Recommended prerequisites

  • Basic understanding of SQL SELECT statements
  • Basic understanding of web requests and responses

Start learning by doing today

Contact sales

Contact Sales

2183 Redirect Link
Thank you!
Our team will be in touch shortly.

Loading form...

If this message remains, it may be due to cookies being disabled or to an ad blocker.

Close button

Ready to skill up
your entire team?

10
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 14-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 10 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels

Ready to skill up
your entire team?

10
Subscriptions
Need more subscriptions? Contact sales.
Continue to checkout
Cancel

With your Pluralsight plan, you can:

With your 14-day pilot, you can:

  • Access thousands of videos to develop critical skills
  • Give up to 10 users access to thousands of video courses
  • Practice and apply skills with interactive courses and projects
  • See skills, usage, and trend data for your teams
  • Prepare for certifications with industry-leading practice exams
  • Measure proficiency across skills and roles
  • Align learning to your goals with paths and channels
  • Solutions

    • Pluralsight Skills
    • Pluralsight Flow
    • Government
    • Gift of Pluralsight
    • View Pricing
    • Contact Sales
    • Skill up for free
  • Platform

    • Browse library
    • Role IQ
    • Skill IQ
    • Iris
    • Authors
    • Professional Services
  • Company

    • About us
    • Customer stories
    • Careers
    • Blog
    • Newsroom
    • Resource center
    • Guides
  • Resources

    • Download Pluralsight
    • Events
    • Teach
    • Partners
    • Affiliate Partners
    • PluralsightOne.org
    • Subscribe
  • Support

    • Contact
    • Help center
    • IP allowlist
    • Sitemap
Globe wireframe
  • Deutsch
  • English
  • French
Copyright © 2004 - 2022 Pluralsight LLC. All rights reserved.
    Terms of Use
    Privacy Notice
    Modern Slavery Act Transparency Statement
  • Like on Facebook
  • Heart on Instagram
  • Retweet on Twitter
  • Share on LinkedIn
  • Watch on YouTube

We use cookies to make interactions with our websites and services easy and meaningful. For more information about the cookies we use or to find out how you can disable cookies, click here.

You have disabled non-critical cookies and are browsing in private mode. For the best possible experience on our website, please accept cookies. For additional details please read our privacy notice.