In this video, we cover Lab #7 in the SQL injection track of the Web Security Academy. This lab contains a SQL injection vulnerability in the product category field. To solve the lab, we perform a UNION based SQL injection attack that queries the database type and version on Oracle. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series ▬ Contents of this video ▬▬▬▬▬▬▬▬▬▬ 00:00​​​ - Introduction 01:24 - Understand the exercise and make notes about what is required to solve it 02:18​​ - Exploit the lab manually 13:26​​ - Script the exploit 26:20 - Summary 26:50​​ - Thank You ▬ Links ▬▬▬▬▬▬▬▬▬▬ SQL injection Lab #6 video (previous video): https://www.youtube.com/watch?v=Hw6tN5K7Uhg SQL Injection | Complete Guide (theory video): https://www.youtube.com/watch?v=1nJgupaUPEQ Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-07/sqli-lab-07.py Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/sql-injection/lab-07/notes.txt Web Security Academy Video Release Schedule: https://docs.google.com/spreadsheets/d/16ypyLuDq2DZ1JAz_WvL1ZV-WiDWhvomgrK_1Hux4MFY/ Web Security Academy: https://portswigger.net/web-security​ Rana's Twitter account: https://twitter.com/rana__khalil