Q3.1) SQL Injection Attack: Login Bypass and Unauthorised Profile Modification

This video demonstrates a SQL injection attack Two SQL injection attacks are performed on a vulnerable web application: 1. Login Bypass — logging in as Ted without knowing his password by injecting SQL code into the username field of the login page. 2. Unauthorised Profile Modification — modifying Boby's email address while logged in as Ted by injecting SQL code into the NickName field of the Edit Profile form. Both attacks exploit the fact that user input is placed directly into SQL queries without any sanitisation or parameterisation. Key concepts demonstrated: SQL injection in login authentication SQL comment character # to bypass password check SQL injection in UPDATE statement Modifying another user's data without their password Why prepared statements prevent SQL injection Tools used: PHP, MySQL, Docker, Firefox, Ubuntu 24.04 LTS Environment: Lab 9 Labsetup (ARM version for Apple Silicon)