Illustration of a working environmentEnrolment opening soon
SQL from the basics to SQL injection
Start with your first SELECT and understand queries before moving to SQL injection. Learn filtering, condition logic, sorting, grouping and UNION, then see how form data changes a query. Connect vulnerability tests to cause analysis and verification of the fix.
PLN 449planned price including tax
In your browser · No installation · Tutor and narration
Open your browser. Start learning.
Do not spend your first evening configuring an environment. The application, tools and task context are in one place. You do not need Docker, a VPN, a virtual machine or paid software.
A virtual tutor walks you through the example and highlights important parts of the application, code or tool. Connect the instruction to what is happening on screen.
Narration explains the mechanism, decision and result. Pause the guidance, return to an earlier step and work through it at your own pace.
Take over in the exercise: change data, run a test or make a decision. Compare the result and improve your solution using the explanation.
One environment, without switching between a video and a local installation. Tools fit the topic: from HTTP requests and code to a terminal, calculator or document. Practice in simulators and prepared cases, without attacking other people's systems.
What will you be able to do?
First, understand the query. Then see how user input changes its meaning and how to check whether a fix addresses the cause.
You do not know SQL or understand query results.
Read the requested records and explain why the condition returned that particular dataset.
You have a list of test strings but do not know what causes the flaw.
Compare normal input with conditions that change the result. Justify the conclusion through behavior, not a single error message.
You treat removal of a syntax error as a completed fix.
Explain the role of parameterization and allowed SQL structure. Check that users still see only authorized records.
A foundation for deliberate SQL injection testing and discussing causes and fixes with developers, not just blocking one payload.
Connect each skill to a concrete work product. Return to explanations while you practice.
A syllabus backed by materials
See what makes up the syllabus: lessons, explanations, examples and exercises. The figures below describe different types of materials.
The figures describe the English-language source materials. The waiting list is for the planned Polish edition. These counts do not mean its translation is complete. Demonstration steps, examples and tasks are different units, not hours of video or counts of unique vulnerabilities.
Entry point
Available in Polish and English — you can switch language at any time. Command names, code snippets and standard identifiers remain in their original form.
How you learn
The tutor walks through an example and explains each decision. In the exercise, return to the context, check the result and improve your answer.
Goal, constraints and inputs. Know what you are testing and why.
Watch a demonstration with tutor commentary, step by step.
Work with data, a tool or a scenario. Compare the result with your expectation.
Justify your decision and understand its limitations. Return to anything that needs improvement.
Exercises use simulators and selected mechanisms that run in the browser. They do not require attacking other people's systems.
Planned syllabus
Each area develops a specific skill. Learn not only the topic but also the action and outcome that learning leads to.
Each topic includes a skill and a concrete exercise outcome.
I want to join the listLearn tables, columns, records and keys through application data. Read the schema and relationships between orders, invoices, users and tenants. Establish what a query result means before changing it.
Tutor-guided exercise
Choose columns, a table and a WHERE condition. Compare a search result with a query deliberately returning no records. Read syntax and returned data together to understand every result change.
Tutor-guided exercise
Practice comparisons, AND, OR and how grouping conditions affects results. Build pairs of true and false conditions. This supports later understanding of login-condition bypass and boolean-based tests.
Tutor-guided exercise
Use ORDER BY, GROUP BY and row limits in analytical queries. Distinguish a filter value from a column name or SQL structure fragment. Connect these elements to search and report parameters.
Tutor-guided exercise
Trace search text, a product identifier and a sort choice into SQL. Compare normal form use with a value that changes the query. Identify the exact point where user data becomes syntax.
Tutor-guided exercise
Start with a valid request and a control value that returns no results. Then check a syntax-error signal and matched true and false conditions. Connect the application response to changes in the query and records to distinguish a lead from a confirmed mechanism.
Tutor-guided exercise
Learn result combination with UNION, matching column counts and types, and where data appears. Progress from a valid query to its use in a controlled SQL injection example. Also test variations where filtering or query shape changes the possible result.
Tutor-guided exercise
Practice character representations, hexadecimal values and questions about text fragments. Connect these operations to condition logic and response interpretation. See why input meaning depends on successive processing stages.
Tutor-guided exercise
Compare inference from error messages, logical differences and response time. Choose controls for a specific hypothesis. Timing examples and selected database functions are modeled to teach interpretation, not measure an external server.
Case analysis
Use prepared examples to analyze how file operations depend on database functions, permissions and environment. Distinguish changing a query from reading a file. Identify information needed for further verification without accessing others' resources.
Case analysis
Compare string concatenation with treating values as data. Check why dynamic column names and sort direction require separate controls. Analyze ORM-based code instead of assuming that using a library removes the problem.
Tutor-guided exercise
Check invoice ownership, the role performing an export and tenant isolation. See that a safely constructed query can still return the wrong record. Connect user permissions to a data-restricting condition.
Tutor-guided exercise
Record only the data needed to explain the issue, together with the request, query and result. Distinguish SQL injection, missing authorization and an unexplained signal. Describe the cause and recommend a fix for the actual flaw.
Workshop with prepared data
Repeat the same input after the fix and check that it is treated as data. Separately test other users' and your own records, export roles and report scope. Finish with results that allow assessment of the fix.
Workshop with prepared data
In practice
Each case has context, a concrete action and an outcome. The goal is not to memorize a command but to understand why the result changed.
Read the schema, write SELECT queries and prepare filters, sorting and grouping. Compare normal queries with true and false conditions and practice UNION.
Work productA set of queries explaining the syntax and returned records.
Trace search input into SQL, prepare paired tests and check the change after securing the query. Separately test whether data ownership restrictions remain enforced.
Work productAn explanation of the injection mechanism and a regression plan for queries and permissions.
Certificate of completion
When you complete the course, the certificate is issued automatically and emailed to you. It shows your name, the date of issue and a unique code, and its second page lists the course scope.
Code verification: cyberszkola.pl/verify
Upcoming standalone course
Planned course price
Polish edition · Launch date not yet announced
Notify me at launchJoining is free. Before sales open, you will receive the date, full scope and purchase terms. We are not taking payments today. This is a separate interest list, not a place reservation or purchase.
For companies and teams
Compatible with LMS platforms including:
and other platforms that support e-learning standards.
Price for companies
Delivery into your company's own LMS from 50 licences.
Ask for a quoteWrite to [email protected]: the number of people, the courses you want and your LMS, if you use one.
Project author
Creator of Cyberwiedza, cyberszkola and AI SecLabs. In these courses, I connect explanations of mechanisms with practice, observation and decisions you need to justify.
Running a command is not enough. What matters is what its output confirms, what it does not confirm and what the next step should be.
More about the authorBefore joining
Yes. Start with tables, records and SELECT, then progress to conditions, sorting, grouping and UNION. Vulnerability analysis belongs to the later part of the planned course.
No. Learn SQL for reading and testing applications, with particular emphasis on SQL injection and data access control. Database server administration is not the course's main purpose.
No. This is an upcoming course announcement and an interest list. Joining is not a purchase, a place reservation or a commitment to pay.
The launch date, price and access terms will be announced before sales open. The interest list is how we send that information.
The course is available in Polish and in English — you can switch language at any time, and lessons, exercise explanations and narration exist in both. Commands, code and tool names keep their original syntax, as used in everyday work.
No. All course exercises run in your browser on a computer with internet access. Training applications, terminals, editors and workshops are part of the platform. You do not install Docker, a virtual machine or a VPN, and you do not need paid external tools.
No. You work in an interactive environment. A virtual tutor highlights important elements, and narration explains the action and its result. Pause the lesson, return to earlier steps and run your own experiments. This guidance is built into the course, not individual consultation with a person.
No. You use training applications, simulators and prepared data. Learn the mechanism and its limitations in a safe environment. External resources are supplementary, not required to complete the exercises.
Yes, a certificate of completion. When you complete the course, you receive a certificate in English with a unique code that anyone can check at cyberszkola.pl/verify. It confirms completion of the course and is issued by the author; it is not an industry certification. We do not promise employment.
No. These are independently authored courses using public references and original cases. They do not replace licensed standards, accreditation or qualifications required in regulated industries.
Join the waitlist
Leave your email address. We will send you news of enrollment, the syllabus and first-edition terms. You will not need to keep checking this page.
Planned price: PLN 449 including tax