#SQLInjection

How can hackers guarantee access during a login attempt, even without knowing the password? 🤔 The answer lies in the simple SQL Injection "OR" payload. #SQLInjection #EthicalHacking #Cybersecurity #ORPayload

XSS to SQL injection parameter reflect Payload: p='<00 foo="<h1>">HTML</00>-- / SQLMAP injection: "p=<00 foo="<h1>">HTML*</00>" #BugBounty #bugbountytips #sqlinjection #xss #BugHunter

SQL Injections are scary!! (hacking tutorial for beginners) ------> #sqlinjection #owasptop10 #sqli

Did you know a simple comment can turn a login field into a successful SQL Injection hack?👀 #SQLInjection #Hacking

🧠 Blind Time-Based SQLi 1️⃣ No error/data output 2️⃣ Uses time delays like IF(SUBSTRING((SELECT pwd FROM users WHERE id=1),1,1)='a', SLEEP(5),0) 3️⃣ Measures response time to infer data char-by-char 🎯 Extracts secrets without visible leaks #bugbounty #sqlinjection #blindsql

I've made my Advanced SQL Injection Techniques repo on GitHub public. Head over to my repo and take a look. I hope you like it. #BugBounty #SQLInjection.

Sleep is optional, SQLi 💉 is mandatory 2 SQLi’s locked in, plus some sweet XSS’s on the side Climbing to Top 4 soon @intigriti 🤝 #BugBounty #SQLInjection #XSS #WebSecurity #EthicalHacking #Intigriti #BugHunter

how to avoid SQL Injections 🔥🔥Join the NetworkChuck Academy!: ☕☕ COFFEE and MERCH: #SQL #SQLinjection #Database

SQL Injection payloads can get messy to remember during testing. This SQL Injection Cheat Sheet is a handy reference with payloads, DB-specific syntax, and common exploitation techniques.💉 🔗 #BugBounty #WebSecurity #SQLInjection #Pentesting #Infosec

ℹ️Sending payload within the URL/URI itself can also trigger SQL injection. So don't just focus on the parameters. #SQLInjection #BugBounty

Tricky ASP blind SQL Injection in a login page. Confirmed using Blind-boolean method,but it took me hours before I found the right payload - that need to be encoded. Sadly, not triaged yet Payload: `';%20waitfor%20delay%20'0:0:6'%20--%20` #BugBounty #bugbountytips #SQLinjection

Advanced SQL Injection Techniques now available in GitBook. Make a copy/ Archive / Convert to PDF before they report this too :). #bugbountytip #BugBounty #SQLInjection #SQLi

This websites advice on creating a PHP and MySQL login form 🙀 ... #SQLInjection

Time-Based sql injection 😉⏲️, from @ProwlSec , as always thanks @coffinxp7 for the Amazing methodologies. Tips:Use waybackurl,filter alive urls,use gf |sqli| then do mass url scan in sqlmap or ghauri #BugBounty #bugbountytips #sqlinjection #Hacking #CyberSecurity

Found a first #SQLInjection of 2023 with full DB dump of 20k+ subscribers, unfortunately got duplicated 😌😌. Time based and UNION Query. Payloads used:👇 #BugBounty #SQLi

Finishing up some unfinished tests from last night, today we found SQLi 🔥 #SQLinjection #BugBounty #Bugcrowd

Bug Bounty Tips This is how to find sql-Injection of the time /?q=1 /?q=1' /?q=1" /?q=[1] /?q[]=1 /?q=1` /?q=1\ /?q=1/*'*/ /?q=1/*!1111'*/ /?q=1'||'asd'||' <== concat string /?q=1' or '1'='1 /?q=1 or 1=1 /?q='or''=' /?q=") /?q=') /?q=-x() #BugBountyTips #SQLinjection #sqli

I was testing an app's #oauth2 today and randomly inject the payload "0'XOR(if(now()=sysdate(),sleep(6-2),0))XOR'Z", with php extension, and booom it was blind #SQLinjection...wt**, never knew SQLi payloads can be sent using .php. #BugBounty #bugbountytips

If you have a JSON login page, test blind-SQL injection directly in the username and/or password fields like below. #BugBounty #SQLInjection #bugbountytips Payload injected in username input field: