The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.
xbow.com | research | #bug-bounty | #cloud | #rce | #vulnerability-research | #sql-injection | #web-security | #cookies | #geolocation-restrictions
Summary
Narrates XBOW's dogged SQL injection hunt after geolocation blocks: header and user-agent spoofing failed, but a cookie pivot into a /non_participating/ endpoint broke through.
- Published
- Collected
Skip to content