CEH v11: SQL Injection & SQLMap

Ethical Hacker v11    |    Intermediate
  • 2 videos | 42m 10s
  • Includes Assessment
  • Earns a Badge
Rating 4.7 of 19 users Rating 4.7 of 19 users (19)
SQL injection is typically used to access sensitive information from a target's database, but under the right circumstances, it can be used to access the remote file system or even allow for remote system shell access. In this course, you'll learn the SQLi techniques used to read and write to files on the target system, as well as gain interactive shell access. Manual SQL injection testing is a necessary skill, but often time to test is limited and it's useful to have a tool like SQLMap. You'll finish this course by learning how to use SQLMap to automate the process of testing SQL injections. This course is one in a series that helps to prepare you for the Certified Ethical Hacker v11 (312-50) exam.

WHAT YOU WILL LEARN

  • Recognize the limitations of using sqli techniques to read a file
    use sqli techniques to read a file on a target system
    identify the sql statements that can be used to write files to a target system using sqli and that could allow an attacker to gain interactive shell access
    describe the sql injection techniques used to write a file on a target system
  • Recognize how to use sqlmap to automate detection and enumeration of sql injections
    identify sqlmap options to enumerate data from sql injections
    describe the sqlmap requirements in order to automate sql injections

IN THIS COURSE

  • Locked
    1.  System Access with SQL Injection
    23m 29s
    In this video, you will learn how to identify SQL statements that can be used to write files to a target system using SQLi. This could allow an attacker to gain interactive shell access. FREE ACCESS
  • Locked
    2.  SQL Injection Testing with SQLMap
    18m 42s
    After completing this video, you will be able to describe the requirements for sqlmap in order to automate SQL injections. FREE ACCESS

EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE

Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.

Digital badges are yours to keep, forever.

YOU MIGHT ALSO LIKE

Course CEH v12: SQL Injection Concepts and Attacks
Rating 5.0 of 1 users Rating 5.0 of 1 users (1)
Course Exploring SecOps Tools: SQL Injection Testing Using sqlmap
Rating 5.0 of 3 users Rating 5.0 of 3 users (3)
Course CEH v12: Network Scanning, TCP, Host Discovery, and Port/Service Scanning
Rating 5.0 of 1 users Rating 5.0 of 1 users (1)

PEOPLE WHO VIEWED THIS ALSO VIEWED THESE

Course CEH v11: XSS, Web Shells, APIs & Webhooks
Rating 4.8 of 13 users Rating 4.8 of 13 users (13)
Course CEH v11: Footprinting, Google Dorks, Search Engines & Sub-domains
Rating 4.8 of 41 users Rating 4.8 of 41 users (41)
Course CEH v11: Cloud Computing, Containers, Hacking & Security Controls
Rating 4.6 of 18 users Rating 4.6 of 18 users (18)