SQL injection attack, querying the database type and version on MySQL and Microsoft | Portswiggers

Description:
Today’s topic is SQL Injection: querying the database type and version on MySQL and Microsoft SQL Server, based on a lab from the PortSwigger Web Security Academy.

In this video, I demonstrate how an SQL injection vulnerability can be leveraged to identify the backend database technology and extract version information when the application is running on MySQL or Microsoft SQL Server. This is a key step in database fingerprinting and helps attackers and testers choose the correct payloads during exploitation.

What this video covers:

Identifying MySQL and Microsoft SQL Server as the backend database

Using SQL injection to retrieve database version information

Differences in SQL syntax between MySQL and MSSQL

Why database fingerprinting is critical in real-world security testing

This walkthrough is intended for educational purposes only and is part of learning web application security, penetration testing, and bug bounty hunting fundamentals.



sql injection
mysql sql injection
mssql sql injection
query database version
portswigger sql injection
web security academy
database fingerprinting
bug bounty
penetration testing
web application security
ethical hacking
mysql database
microsoft sql server
sql injection tutorial