This repository contains a advanced methodology of all types of SQL Injection.

• Find injection point
• Understand the website behaviour
• Send queries for enumeration
• Understanding WAF & bypass it
• Dump the database

• Error- or UNION-based SQLi
  • Routed queries (Advanced WAF Bypass)
  • Bypass Error: The used SELECT statements have a different number of columns
  • New attacking vectors (Bypassing WAF)
    • The Alternative way of using And 0
    • The Alternative WAY of using Null
• Boolean-based (content-based) Blind SQLi
• Time Based SQLi
• Stabilise & Whitespace Filter Bypass
• Local File Inclusion (LFI)
• Privilege Escalation

• Error- or UNION-based SQLi
• Local File Inclusion (LFI)
• Privilege Escalation

• To be added...

• Error- or UNION-based SQLi
• Privilege Escalation