Introduction: Embarking on a journey of continuous learning and ethical hacking, I recently immersed myself in the intricate world of WebGoat, a hands-on learning platform crafted by OWASP. In this blog post, I aim to provide a glimpse into my exploration of the first lesson on SQL Injection—a testament to my commitment to staying at the forefront of cybersecurity expertise.
Discovering WebGoat: Guided by a standard Nmap scan and an additional script scan, I uncovered an open web port that led me to the intriguing world of WebGoat. Logging into ‘http://10.6.6.11:8080/WebGoat,’ I found myself face-to-face with the challenge and opportunity that this learning environment presented.
Research and Preparation: Recognizing the vast potential within WebGoat, I conducted thorough research, understanding its reputation for simulating a myriad of cybersecurity vulnerabilities. Equipped with this knowledge, I created a new WebGoat account, poised to tackle challenges such as SQL injection, XSS, and broken authentication.
SQL Injection (Intro) Lesson: A Journey of Rediscovery: The SQL Injection (Intro) lesson became a journey of rediscovery for me. Although SQL injection had been a skill I hadn’t actively engaged with for a while, I approached the lesson with determination. Leveraging online resources, I navigated through the intricacies of SQL injection, turning the challenge into a practical and engaging learning experience.
Challenges and Triumphs: The lesson presented formidable challenges, reaching its conclusion demanded a combination of trial and error and strategic research into SQL injection techniques. Overcoming obstacles, such as changing my salary and deleting the access_log table, marked significant triumphs in my ethical hacking journey.
Visual Documentation: To document and share my learning process, I’ve included screenshots showcasing the SQL injections I re-learned during this journey. These visuals serve not only as proof of skill but as a valuable resource for anyone venturing into the realm of ethical hacking.
Continuous Learning Beyond SQL Injection: While conquering the SQL Injection (Intro) lesson was a notable achievement, it merely serves as a launching pad for my exploration within WebGoat. With a multitude of lessons awaiting, I am eager to delve into other topics and vulnerabilities, expanding my skill set and deepening my understanding of the dynamic field of cybersecurity.
Conclusion: My experience navigating the SQL Injection (Intro) lesson in WebGoat has been both thrilling and enlightening. This journey not only showcases my ability to overcome challenges but reflects my unwavering commitment to continuous learning in the ever-evolving landscape of cybersecurity. As I share this chapter of my exploration, I invite talent acquisition professionals to witness my dedication to staying at the forefront of ethical hacking and cybersecurity expertise.