Membership

The Most Notorious Bugs: SQL Injection & XSS (W49)

Develop practical testing skills for SQL injection and cross-site scripting. Compare XSS variants, test SQL injection manually and with tools, and use Python requests to understand how web application findings can be reproduced.

Instructor · faiyaz

Modules:: 4
Lessons:: 25

PentestMag learning

Practical skills.
Verified progress.

What you'll learn

Identify reflected, stored, and DOM-based XSS.
Test error-based and blind SQL injection.
Compare automated scans with manual verification.
Use HTTP requests to reproduce and investigate findings.

Prerequisites

Basic web application concepts are useful. Some exercises use Python, but prior Python experience is optional.

Module 1

1. (W49M01) Introduction to XSS
2. (W49M01) Finding XSS
3. (W49M01) Reflected XSS
4. (W49M01) Stored XSS
5. (W49M01) DOM XSS

Module 2

1. (W49M02) Introduction
2. (W49M02) Error-based SQL Injection
3. (W49M02) Blind SQL Injection
4. (W49M02) Automated Testing
5. (W49M02) Manual Testing

Module 3

1. (W49M03) Introduction to Requests Library
2. (W49M03) Sending GET Requests
3. (W49M03) Sending POST Requests

Module 4

1. (W49M04) Introduction
2. (W49M04) Taking Dynamic Input from CLI
3. (W49M04) XSS (The Algorythm)
4. (W49M04) XSS (Crawling Links)
5. (W49M04) XSS (Filtering Links with Parameters)
6. (W49M04) XSS (Testing Dangerous Characters)
7. (W49M04) XSS (Testing The Payload)
8. (W49M04) Writing Output to the File
9. (W49M04) SQLI (The Algorythm)
10. (W49M04) Creating SQLI Scanner pt. 1
11. (W49M04) Creating SQLI Scanner pt.2
12. Practice: (W49Q24)

Assessments

Quiz Required

(W49Q01) FINAL EXAM

Course access

Unlock The Most Notorious Bugs: SQL Injection & XSS (W49).

$9 for 3 days then $90/month

Enter your email. We’ll send a sign-in code here without taking you away from this course.