## Apprentice Level - ✅ [[1. SQL injection vulnerability in WHERE clause allowing retrieval of hidden data]] - ✅ [[2. SQL injection vulnerability allowing login bypass]] ## Practitioner Level - ✅ [[3. SQL injection attack, querying the database type and version on Oracle]] - ✅ [[4. SQL injection attack, querying the database type and version on MySQL and Microsoft]] - ✅ [[5. SQL injection attack, listing the database contents on non-Oracle databases]] - ✅ [[6. SQL injection attack, listing the database contents on Oracle]] - ✅ [[7. SQL injection UNION attack, determining the number of columns returned by the query]] - ✅ [[8. SQL injection UNION attack, finding a column containing text]] - ✅ [[9. SQL injection UNION attack, retrieving data from other tables]] - ✅ [[10. SQL injection UNION attack, retrieving multiple values in a single column]] - ❌ [[11. Blind SQL injection with conditional responses]] - ✅ [[12. Blind SQL injection with conditional errors]] - ✅ [[13. Visible error-based SQL injection]] - ✅ [[14. Blind SQL injection with time delays]] - ✅ [[15. Blind SQL injection with time delays and information retrieval]] - ✅ [[16. Blind SQL injection with out-of-band interaction]] - ✅ [[17. Blind SQL injection with out-of-band data exfiltration]] - ✅ [[18. SQL injection with filter bypass via XML encoding]]