FedSearch - Federated network search engine

It looks like an angle bracket is filtered on the backend. I need this operator for a time-based injection because there is no response output. Alternative filter evasion? #sqli #sqlinjection #payload #BugBounty #bugbountytipHelp.

#sqli #sqlinjection #payload #bugbounty #bugbountytiphelp

Last updated 1 year ago

Original post

Vasileiadis A. (Cyberkid) 🛡 · @Cyberkid1987

151 followers · 428 posts · Server defcon.social

Open media

SQL Injection Cheat Sheet 💉

https://t.co/lM8Sq1igz1

#infosec #cybersecurity #hacking #pentesting #sqli

Last updated 1 year ago

Original post

Antonio Meis · @AntonioMeis

0 followers · 3 posts · Server geekdom.social

Nice post for exploiting blind sql injections.

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/sqlmap-tricks-for-advanced-sql-injection/

#hacker #sqli #hacking #owasp

Last updated 1 year ago

Original post

LisPi · @lispi314

538 followers · 11497 posts · Server mastodon.top

@lewdthewides Wait what the fuck? https://en.wikipedia.org/wiki/2023_MOVEit_data_breach#Methodology

How in the hell do you still have #SQLInjection vulnerable frontends in this day and age in government-used systems? Has no one heard of #PreparedQueries / #PreparedStatements (yay type-safety) and #StoredProcedures? What, did they hire some intern with no supervision for writing a high-liability system?

#SQL #SQLI

#sqlinjection #preparedqueries #storedprocedures #sql #sqli #preparedstatements

Last updated 1 year ago

Original post

Johann · @wuzzi23

5 followers · 35 posts · Server cybervillains.com

Open media

Indirect (second order) AI prompt injections look scary => Website takes control of your AI.

Might be like #SQLi and #XSS all over again. 😭

Wondering if such injections could happen via ads too? 🤯

#redteam #offensiveml #infosec #Pentest #BingAI #ChatGPT #airedteam

#sqli #xss #redteam #offensiveml #infosec #pentest #bingai #chatgpt #airedteam

Last updated 1 year ago

Original post

Konstantin · @kpwn

38 followers · 163 posts · Server infosec.exchange

If you want good examples for SQL injection, use these.

Auth Bypass: admin'; -- -

SELECT * FROM users WHERE username = 'admin'; -- -' AND password = 'password'

Boolean: ' AND '1'='1 / ' AND '1'='2

SELECT * FROM articles WHERE author = 'admin' AND '1'='1'

Credit: https://twitter.com/0xtib3rius/status/1624819441044185088?s=46&t=VP6AhjKJodOpHMnv3akxeg

#Pentesting #BugBounty #CyberSec #InfoSec #SQLi

#pentesting #bugbounty #cybersec #infosec #sqli

Last updated 1 year ago

Original post

Yashwant Singh 🐧 · @earthtoyash

9 followers · 84 posts · Server infosec.exchange

I just published an article on "SQL injections 💉- Injecting to hacking"
Read it exclusively on @medium. 🙂
#cybersecurity #SQL #SQLi #infosec #hacking
https://earthtoyash.medium.com/sql-injections-injecting-to-hacking-2dc6ffdeb8c7

#cybersecurity #sql #sqli #infosec #hacking

Last updated 2 years ago

Original post

Yashwant Singh 🐧 · @earthtoyash

9 followers · 84 posts · Server infosec.exchange

I just published an article on "SQL injections 💉- Injecting to hacking"
Read it exclusively on @medium.
https://earthtoyash.medium.com/sql-injections-injecting-to-hacking-2dc6ffdeb8c7
#cybersecurity #SQL #SQLi #infosec #hacking

#cybersecurity #sql #sqli #infosec #hacking

Last updated 2 years ago

Original post

Yashwant Singh 🐧 · @earthtoyash

9 followers · 84 posts · Server infosec.exchange

I just published an article on "SQL injections 💉- Injecting to hacking"
Read it exclusively on @medium. 🙂
https://link.medium.com/Qx1X6rgKtwb
#cybersecurity #SQL #SQLi #infosec #hacking