List: SQLi | Curated by p4n7h3rx | Medium

Mar 21, 2023

16 stories

2 saves

SQLi

In

InfoSec Write-ups

by

nav1n

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

Thank you for your love and appreciation for my recent blog post on MySQL SQL Injection that I found in a major international retail…

Mar 10, 2023

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

Mar 10, 2023

This story is no longer available

Prashant Kumar

A Not-So-Blind RCE with SQL Injection

This is a story of a typical xp_cmdshell giving a RCE which is blind due to some restrictions and how I bypassed those restrictions.

Jan 30, 2020

A Not-So-Blind RCE with SQL Injection

Jan 30, 2020

In

The Gray Area

by

Graham Zemel

P1 Bug Hunting: A Step-by-Step Guide to SQL Injection

TL;DR- A beginners guide to SQL Injection in bug hunting, and obtaining access to the inner databases of targets.

Nov 21, 2022

P1 Bug Hunting: A Step-by-Step Guide to SQL Injection

Nov 21, 2022

Dragon Security

SQLMap Tamper Scripts (SQL Injection and WAF bypass) Tips

Use and load all tamper scripts to evade filters and WAF :

Apr 15, 2018

Apr 15, 2018

Nitin yadav

How to Find SQL Injection Attack Vulnerabilities in 2022?

SQL Injection (also known as Structured Query Language injection) is one of the most popular and severe vulnerabilities out there.

Sep 10, 2022

How to Find SQL Injection Attack Vulnerabilities in 2022?

Sep 10, 2022

Saad Ahmed

SQl Injection

Hy Guy’s this write up is all about my SQL Injection that I found in PRIVATE program running on BugCrowd

Jun 17, 2019

SQl Injection

Jun 17, 2019

In

InfoSec Write-ups

by

Mahmoud Youssef

How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes

Hello all, hope you’re OK. Our journey today is about how I found multiple SQL Injections in a bug bounty program in just a few minutes…

Dec 14, 2021

How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes

Dec 14, 2021

This story is no longer available

This story is no longer available

This story is no longer available

This story is no longer available

Ozgur Alp

BigQuery SQL Injection Cheat Sheet

Last year, we (My researcher partner on this topic, Anil and me) and found a SQL injection vulnerability on a target at Synack which was…

Feb 14, 2022

BigQuery SQL Injection Cheat Sheet

Feb 14, 2022

Aswin Govind

Where is SQL Injection : Try this

Before that let me tell myself, I am Aswin Govind from Kerala. And I am working as Application Security Consultant.

Oct 20, 2021

Where is SQL Injection : Try this

Oct 20, 2021

In

InfoSec Write-ups

by

0xEchidonut

How I Escalated a Time-Based SQL Injection to RCE

Good day everyone! I hope all of you are doing well.

Oct 17, 2021

How I Escalated a Time-Based SQL Injection to RCE

Oct 17, 2021

Mahmoud Youssef

How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes

Hello all, hope you’re OK. Our journey today is about how I found multiple SQL Injection in a BugBounty program in just few minutes with a…

Nov 6, 2021

How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes

Nov 6, 2021

p4n7h3rx
869 Followers
Information Security Consultant | Red Teamer | Bug Bounty Hunter | Penetration Tester
Following
Posts By SpecterOps Team Members
The Medium Blog
Marcel Rick-Cen
Sanaullah Aman Korai
Bassem M Bazzoun
See all (96)

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams