PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SQLi: The ultimate Bug Bounty guide to exploiting SQL injection vulnerabilities

yeswehack.com | blog | #bug-bounty | #web-security | #oob | #guide | #sqli | #blind-sqli
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Kicking off the 'Vulnerability Vectors' series: classic and advanced SQL injection techniques including blind SQLi, time-based attacks and OOB callbacks, with payload crafting and workflow tips.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · bugcrowd.com
How to find RCE: A list of pathways and detection methods
A field guide to finding RCE: command injection in OS exec sinks like system, subprocess, and child_process, detected via output changes, time delays, and out-of-band callbacks to collaborator servers.
blog · hackerone.com
Breaking Down the OWASP Top 10: Injection
A walkthrough of OWASP Top 10 injection attacks - reflected and stored XSS, SQLi, SSTI, CRLF, header and command injection, and directory traversal - with concrete exploitation examples.
blog · bugcrowd.com
The Three Principles of Bug Bounty Duplicates
Bugcrowd outlines three principles for judging bug bounty duplicates—touch the code, pay the bug; similar is not the same; many is not systemic—plus triage scenarios like multiple SQLi findings.
Back