使用BurpSuite实验室练习SQL注入攻击

因为之前对HTTP和Java都不熟悉，所以想要一开始就使用实验室师兄给的在线平台练习有点困难。好在我在一本参考书上看到推荐使用BurpSuite的在线实验室，又因为前段时间我恰好学习了Burp的网络扫描相关，于是我尝试着利用这个软件进一步的学习WEB的网络安全。后来发现上面的练习难度适中，并且既有原理说明，又有操作指导，强烈推荐像我这样的新手入门使用。
这周首先学习的是SQL注入攻击的第一部分。实验室地址

首先，Burpsuite上给出的SQL的定义：

SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. It generally allows an attacker to view data that they are not normally able to retrieve. This might include data belonging to other users, or any other data that the application itself is able to access. In many cases, an attacker can modify or delete this data, causing persistent changes to the application’s content or behavior.
In some situations, an attacker can escalate an SQL injection attack to compromise the underlying server or other