description
course
This course equips participants with the principles, techniques, and tools required to exploit SQL injection vulnerabilities. The curriculum also covers vulnerability discovery methods, including identifying the target DBMS in which vulnerabilities exist. It is worth highlighting that SQL injections are examined not solely as web application vulnerabilities, but in a broader attack context.
course audience
Penetration testing engineers and enterprise cybersecurity architects.
prerequisites
General cybersecurity knowledge at the ANT0000 course level, and TCP/IP networking knowledge at the ANT-N101 course level. Knowledge of operating systems and databases is recommended.
how it works
education
online course
The online course involves group classes with an instructor via video conferencing, in addition, homework and an exam.
for corporate clients
training for corporate clients includes online and self-study courses, as well as additional services required by corporate clients: organizing training plans for client departments, assessing the effectiveness of training, etc.
program
course
• Target DBMS identification.
• SQL injection discovery logic and toolset.
• SQL injection defense mechanisms.
• UNION-based injection techniques.
• File operations via SQL injection.
• Blind injection.
• Double-blind injection.
• Error injection.
• Time-based injection.
• Data extraction and implantation via SQL injection.
• Malicious action automation.
• SQL filtering and WAF bypass techniques.
Сourse purchase
options
individual
Cost — $1,510.43
Group online classes
Unlimited access to all the materials
Live webinars with teachers
Homework
Exam with certificate
To confirm course dates fill out the form.
SUBMIT YOUR APPLICATION
corporate
Cost from $1,510.43
To obtain information about the final cost and clarify the date of the course, please fill out the form.
SUBMIT YOUR APPLICATION
