Zerohunt
Programs
AboutSubmit a reportSign in
LabsCoursesConceptsVideosAcademy
← All courses
ExpertSQL / command injection

Injection Mastery

From a single quote to a shell. This path covers classic SQL injection, the blind variants that give you nothing to read, and the step from injection into command execution on the host.

Syllabus

  1. 1Understanding injectionReading10 min
  2. 2Lab: UNION-selecting the users tableLab45 min
  3. 3Lab: boolean-blind extractionLab90 min
  4. 4Lab: command injection through a filenameLab180 min
Zerohunt · bug bounty marketplaceBack to top↑

Break it before they do.

A trusted bug bounty marketplace: programs, scope, reports, triage, bounty, retest and reputation — in one workflow.

01Platform

  • Programs→
  • Services→
  • Pricing→
  • Hall of Fame→
  • Submit a report→

02For companies

  • How it works→
  • Company directory→
  • Request a proposal→

03Resources

  • All resources→
  • Academy→
  • Labs→
  • Community→
  • Talent→

04Company

  • About→
  • For researchers→
  • Trust & safety→
Zerohunt
© 2026 Zerohunt · All rights reservedTerms · PrivacyInternal Team Edition · v1.0