#SQLi

SQL Injections are scary!! (hacking tutorial for beginners) ------> #sqlinjection #owasptop10 #sqli

Alhamdulillah 🥹 just got my first 5-digit $$$$$ bounty from my favorite program for a NoSQLi finding that leaks 5+ years of extensive PII. #BugBounty #NoSQLi #sqli #nosqli #Infosec

Time-Base SQL Injection Payload: (select*from(select(sleep(15)))a) #bugbountytips #BugBounty #sqli

Test Cases for Email Address Functionality Some Email based Payloads for Different Vulnerabilities created by @intigriti #bugbounty #bugbountytips #sqli

Bug Bounty Tip: Don't overlook JSON parameters like column. A simple customerName::int error led to a confirmed SQL Injection. 👀 #BugBounty #SQLi

Mass Hunting of SQLI (copied) #bugbountytips #infosec #sqli #bugbounty

Every once in a while, you come across one of those rare bugs - an SQL injection in a mobile app. #SQLi #BugBounty

#SQLi Polyglot* &1/*'/*"/**/||1#\ or and-1/*'/*"/**/||1--\ It performs injection in single and double quotes scenarios and also in quoteless ones, where the injection lands in 2 consecutive points of the query. Use it everywhere at the same time. * Tested in MySQL & MariaDB

SQL Injection Cheat Sheet #sqli #cybersecurity

Exceptional SQLi ✔️ Top 100 overall severity high to exceptional @intigriti ✔️ And this is just the warm-up 🔥 #SQLIMaster #BugBounty #SQLi #InfoSec #CyberSecurity #Leaderboard

💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli

Finding the right SQLi payload isn’t always easy. If you can’t craft custom logic, use Time-Based techniques to prove control. Built this with AI ( for a POC: ';IF(LEN(USER_NAME())>=5)WAITFOR DELAY '0:0:20'-- #BugBounty #SQLi #bugbountytips #hackerone

Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : Refrence : #GLPI #SQLi #CVE202524799

Rapid7 Nexpose <= 6.6.48 boolean-based #SQLi found by Mikhail Klyuchnikov. "This vulnerability could have allowed an authenticated user with a low permission level to access resources beyond their assigned permissions." - Rapid7 CVE-2020-7383 👉

Bug Bounty cheatsheet @trbughunters #bugbountytip #SQLI #RCE #SSRF

Remember the SQLi that gave me 204 DBs? Company patched it in 10 mins… but as a hunter, the hunt doesn’t stop there. 🕵️‍♂️ I started looking for connected legacy assets → and found my way back in. #BugBounty #SQLi #bugbountytips

Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵 👇

Easy Confirming SQLi: Entry point detection:- ' " ` ') ") `) ')) ")) `)) #sqli #bugbountytip

SQL injection ID parameter ?id=1' order by 1 --+ ?id=1' and "a"="a"--+ ?id=1' and database()="securtiy"--+ ?id=1' and substring(database(),1,1)="a"--+ ?id=1' and sleep(2) and "a"="a"--+ ?id=1' and sleep(2) and substring(database(),1,1)="a"--+ #bugbountytips #bugbountytip #sqli

SQL Injections are still a thing!! Ranked #3 on the OWASP Top 10. I covered the basics of how they work here--------> #sqlinjection #sqlsequel #sqli

SQL Injection Payload i was able to locate a SQL injection very hard to exploit , with digging I successfully got it with the sleep payload ''||(select 1 from (select pg_sleep(6))x)||' ==> i added as well to my SQL wordlist happy hunting ♥ #SQLi Credit: @GodfatherOrwa