In this video, we cover Lab #8 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product category field. To solve the lab, we perform a UNION based SQL injection attack that queries the database type and version on Microsoft and MySQL databases. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series ▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬ 00:00​​​ - Introduction 01:22 - Understand the exercise and make notes about what is required to solve it 02:17​​ - Exploit the lab manually 10:02​​ - Script the exploit 21:54 - Summary 22:18​​ - Thank You ▬ Links ▬▬▬▬▬▬▬▬▬▬ SQL injection Lab #7 video (previous video): https://www.youtube.com/watch?v=neeY0iVa_0A SQL Injection | Complete Guide (theory video): https://www.youtube.com/watch?v=1nJgupaUPEQ Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-08/sqli-lab-08.py Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-08/notes.txt Web Security Academy Video Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/ Web Security Academy: https://portswigger.net/web-security​ Rana's Twitter account: https://twitter.com/rana__khalil