Uploaded July 2023 | Updated September 2026, 4 hours ago
In this video, Tib3rius completes the Prioritise room from TryHackMe (tryhackme.com/room/prioritise ), which involves less common SQL injection techniques!
0:00 - Introduction
0:20 - Starting Prioritise
1:43 - Finding a potential SQL "Order By" injection.
2:49 - Testing SQL with sqlfiddle.com and trying some basic injections on the target.
7:19 - Using a time-based payload to determine the database is SQLite.
10:41 - Confirming that Boolean Error Inferential injection payloads work.
14:16 - Explaining how Inferential/Blind injection works.
18:20 - Extracting data from the database using Boolean Error Inferential injection!
22:05 - Finding the table name length and then the table name itself.
25:26 - Finding the number and name of the table columns.
29:41 - Enumerating the other table in the database.
34:09 - Extracting the flag from the database!
39:40 - Outro
Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
Threads: threads.net/@0xtib3rius
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
In this video, Tib3rius completes the Prioritise room from TryHackMe (tryhackme.com/room/prioritise ), which involves less common SQL injection techniques!
0:00 - Introduction
0:20 - Starting Prioritise
1:43 - Finding a potential SQL "Order By" injection.
2:49 - Testing SQL with sqlfiddle.com and trying some basic injections on the target.
7:19 - Using a time-based payload to determine the database is SQLite.
10:41 - Confirming that Boolean Error Inferential injection payloads work.
14:16 - Explaining how Inferential/Blind injection works.
18:20 - Extracting data from the database using Boolean Error Inferential injection!
22:05 - Finding the table name length and then the table name itself.
25:26 - Finding the number and name of the table columns.
29:41 - Enumerating the other table in the database.
34:09 - Extracting the flag from the database!
39:40 - Outro
Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
Threads: threads.net/@0xtib3rius
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
