Uploaded August 2025 | Updated September 2026, 8 hours ago

---

Tib3rius shares the Break & Repair technique for detecting and verifying SQL injections quickly, even in blind injection situations. Don't rely on scanners, don't just hunt error-based injections, find SQL injections with ease using this simple method!

Thanks to @ThreatLocker for sponsoring this video. To learn more about ThreatLocker, head over to threatlocker.com/tib3rius!

My cheatsheet: tib3rius.com/sqli
Lab 1: portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-oracle
Lab 2: portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-mysql-microsoft
Lab 3: portswigger.net/web-security/sql-injection/blind/lab-conditional-responses

0:00 Intro
4:07 Break & Repair Explained
11:01 Lab 1 Walkthrough
14:36 Lab 2 Walkthrough
17:32 Lab 3 Walkthrough
20:12 Outro

X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius