Categoría: writeups

Blind SQL injection with conditional errors

Blind SQL injection with conditional responses

SQL injection UNION attack, retrieving multiple values in a single column

SQL injection UNION attack, retrieving data from other tables

SQL injection UNION attack, finding a column containing text

SQL injection UNION attack, determining the number of columns returned by the query

User role controlled by request parameter

Unprotected admin functionality with unpredictable URL

Unprotected admin functionality

SSRF with blacklist-based input filter