AbhishekBug Bounty in Lockdown (SQLi and Business Logic)I hope you all are doing well in this lockdown. I kinda have a hard time concentrating on bug bounty for now cause of staying home all the…Jun 24, 20202Jun 24, 20202
0xJinBug Bounty: Story of a Not Applicable SQL Injection worth 15,000$Note: I will not mention the companies, for reasons of privacy and confidentiality.Mar 23, 20213Mar 23, 20213
SRLSEC 🇮🇳How I found another SQLi on the Government website in just 5 minutesTwo months ago I started the journey of bug hunting of Kerala govt websites. In this journey, there are lots of vulnerabilities identified…Aug 21, 2021Aug 21, 2021
SRLSEC 🇮🇳Three different types of SQL injection in one POST parameterHi everyone, I’m Sarathlal Srl (a.k.a SRLSEC) from India. SQL injection is my favorite attack so I always try to learn about it. In the…Aug 12, 20211Aug 12, 20211
SRLSEC 🇮🇳Time-Based SQL Injection to Dumping the DatabaseI have always been interested in testing the security of Government websites. This is my first real-world experience in INFOSEC I found SQL…Jul 3, 20212Jul 3, 20212
Ratnadip GajbhiyeAdmin Panel Accessed Via SQL Injection… (Ezy Boooom…😅)Hello All,Feb 27, 20218Feb 27, 20218
InPenTester NepalbyBibek NeupaneSQL Injection in Harvard’s SubdomainHi there! I’m Bibek Neupane from Nepal. In this first-ever write-up of mine, I’ll try to cover my story of finding a SQL Injection on…Apr 17, 20227Apr 17, 20227
InSystem WeaknessbyKwadwo AmoakoSQL injection to Remote Command Execution (RCE)Hello hackers, before we get into it, I would like to know your view of this — between a hacker’s curiosity and instinct which would you…May 31, 20229May 31, 20229