Databases
Databases store the data attackers want most. This roadmap teaches you SQL fundamentals, how to query and design databases, and critically — how SQL injection attacks work and how to defend against them.
📋 Lessons (7 total)
Understand the relational model and write foundational SQL: CREATE TABLE, INSERT, SELECT, WHERE, ORDER BY, and basic JOINs.
Master GROUP BY aggregates, subqueries, CTEs, and window functions to answer complex analytical questions from your data.
Design well-structured relational schemas: entity-relationship modeling, normal forms (1NF–3NF), and schema design patterns for real security applications.
Make queries fast with indexes, protect data integrity with transactions, and understand how query planners work — critical for building reliable, performant security tools.
Explore document (MongoDB) and key-value (Redis) NoSQL databases — their data models, query languages, use cases, and security considerations.
Master SQL injection — how it works, classic and blind techniques, UNION attacks, and how to defend with parameterized queries, ORMs, and least privilege.
Full/incremental/differential backups, point-in-time recovery via transaction logs, least-privilege database accounts, and why restore testing matters as much as the backup.
Data is the Target
SQL injection remains one of the top web vulnerabilities. Understanding databases is critical for both attack and defense.
What You'll Learn
- ✓ Write complex SQL queries with joins
- ✓ Understand database design and normalization
- ✓ Recognize and exploit SQL injection vulnerabilities
- ✓ Harden databases against common attacks
- ✓ Work with both SQL and NoSQL databases