- Read SQL injection portion from Web Application Hackers Handbook (Ch. 9 - Attacking DataStores) and Real World Bug Hunting (Ch 9 - SQL Injection)
- Read PortSwigger's SQL injection : https://portswigger.net/web-security/sql-injection
- Did first 5 labs of Portswigger as well : https://portswigger.net/web-security/all-labs#sql-injection . Did the labs manually, automated (SQLmap), and with my own python scripts