# SQL Fundamentals ## Database Statements ## CREATE DATABASE If a new database is needed, the first step you would take is to create it. This can be done in SQL using the `CREATE DATABASE` statement. This would be done using the following syntax:

The database I just created. I used show databases command to see list of databases plus the one I created.

### QUESTIONS **Using the statement you’ve learned to list all databases, it should reveal a database with a flag for a name; what is it?** To answer this question we need to use this command: * ***show databases;*** — This will list out all the databases. Let’s start

flag: **THM{575a947132312f97b30ee5aeebba629b723d30f9}**

Inside the list of databases, you can see the flag they requested for. **In the list of available databases, you should also see the `task_4_db` database. Set this as your active database and list all tables in this database; what is the flag present here?**

flag: **THM{692aa7eaec2a2a827f4d1a8bed1f90e5e49d2410}**

## **CRUD Operations**

**QUESTIONS** **Using the `tools_db` database, what is the name of the tool in the `hacking_tools` table that can be used to perform man-in-the-middle attacks on wireless networks?** Follow the following steps to answer the question asked. 1. Use **use** command to select the database you want to work with. 2. Use **show** **table** command to list out tables in the database selected. Here, we just have one table, **hacking\_tools** 3. Use **select** command with **\*** symbol to list (read — Retrieves record from the table) out all the columns and their contents.

**Using the `tools_db` database, what is the shared category for both *****USB Rubber Ducky and Bash Bunny*****?**

## **Clauses**

## QUESTIONS **Using the `tools_db` database, what is the total number of distinct categories in the `hacking_tools` table?** Use the `DISTINCT` clause.

**Using the `tools_db` database, what is the first tool (by name) in ascending order from the `hacking_tools` table?** Use the command below ***select \* from hacking\_tools order by name asc;*** **ORDER BY Clause:** The `ORDER BY` clause can be used to sort the records returned by a query in ascending or descending order. Using functions like `ASC` and `DESC` can help us to accomplish that.

**Using the `tools_db` database, what is the first tool (by name) in descending order from the `hacking_tools` table?** Use the command below ***select \* from hacking\_tools order by name desc;***

## Operators

## QUESTIONS **Using the `tools_db` database, which tool falls under the *****Multi-tool***** category and is useful for *****pentesters***** and *****geeks*****?**

**Using the `tools_db` database, what is the category of tools with an amount greater than or equal to 300?** Use this command; ***select \* from hacking\_tools where amount >=300;***

**Using the `tools_db` database, which tool falls under the Network intelligence category with an amount less than 100?** Use this command; ***select \* from hacking\_tools where amount <=100;***

## Functions

## QUESTIONS **Using the `tools_db` database, what is the tool with the longest name based on character length?** Use this command; ***select length(name) as name\_length from hacking\_tools;***

**Using the `tools_db` database, what is the total sum of all tools?** Use this command; ***select sum(amount) as total\_tools from hacking\_tools;***

**Using the `tools_db` database, what are the tool names where the amount does not end in 0, and group the tool names concatenated by " & ".**

………………………… ## Conclusion Congratulations on completing SQL Fundamentals! This room has hopefully taught you the importance of databases in computing; with so many use cases (which we frequently interact with in our day-to-day lives), learning the fundamentals is a must if you want to pursue a career in cyber security. To round things off, let’s summarise everything that was covered in this room: * **Databases** are collections of organised data or information that are easily accessible and can be manipulated or analysed. * The two primary types of databases are **relational databases** (used to store structured data) and **non-relational databases** (used to store data in a non-tabular format). * Relational databases are made up of **Tables, columns and rows**. **Primary keys** can ensure a record is unique within a table, and **foreign keys** can allow for a relationship/connection to be made between two (or more) tables. * **SQL** is an easy-to-learn programming language that can be used to interact with relational databases. * **Database and Table statements** can be used to create/manipulate databases and tables. * CRUD Operations (**INSERT, SELECT, UPDATE** and **DELETE**) can be used to manage data in a database. * In SQL, we can use **clauses** to define how data should be retrieved, filtered, sorted, or grouped. * The efficient use of **operators** and **functions** can help us filter and manipulate data in SQL Thank you! --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://foothold.gitbook.io/blog/sql-fundamentals.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.