#mysqlbugs 검색 결과

Reloaded356

@Reloaded356

3 분

"So.....did ya run a mysqldump, before? Right?.....right....?"

Professor the Hunter

@bughuntar

. 10. 20.

🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

bughuntar's tweet image. 🐞Bug Bounty Tips🐞

🕷️How to Find SQL Injection in Registration Page?

🐜Try this in the username/email injection point:

#bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

🚨 BUG BOUNTY TIP: SQLi Login Bypass Payloads! 🚨 A classic SQL Injection attack can completely bypass a login form if the input isn't correctly sanitized. Always test for these when looking at login/auth endpoints: The -- (or # for MySQL) comments out the rest of the query,…

bughuntar's tweet image. 🚨 BUG BOUNTY TIP: SQLi Login Bypass Payloads! 🚨

A classic SQL Injection attack can completely bypass a login form if the input isn't correctly sanitized. Always test for these when looking at login/auth endpoints:

The -- (or # for MySQL) comments out the rest of the query,…

Anton

@therceman

2023. 10. 1.

Bug Bounty Tip You can check if a website is running exactly a MySQL database and is potentially vulnerable to SQL injections by using !!0 as input for numeric parameters in the query string or request body. P.S. Why MySQL thinks that !!0 == 1? Cheers!

therceman's tweet image. Bug Bounty Tip

You can check if a website is running exactly a MySQL database and is potentially vulnerable to SQL injections by using !!0 as input for numeric parameters in the query string or request body.

P.S. Why MySQL thinks that !!0 == 1?

Cheers!

Gospel

@4osp3l

. 10. 25.

DAY 1/365 - I've finalized my list of main targets for the bug hunt challenge. - Discovered and exploited a weak CSRF implementation that allowed unauthorized account data manipulation; report submitted. - The application had CSRF implemented but not properly enforced, making…

4osp3l's tweet image. DAY 1/365

- I've finalized my list of main targets for the bug hunt challenge.
- Discovered and exploited a weak CSRF implementation that allowed unauthorized account data manipulation; report submitted.
- The application had CSRF implemented but not properly enforced, making…

HackTube5

@HackTube5

2023. 9. 5.

Another Blind Sql Injection Triage within 3 minute #BugBounty #bugbountytips

Your Tech Girl

@yourtechgirl24

. 10. 26.

Bug Bounty Giveaway for Learners! I’m giving away this complete Bug Bounty & Web Security Course Folder (18 modules) — covering: - SQL Injection - XSS & CORS - Brute Forcing - File Vulnerability - Burp Suite + Labs setup …and everything from beginner to advanced! Cost About -…

X

@TheMsterDoctor1

2023. 10. 5.

SQL injection vulnerability that can be used to escalate privileges and execute code. #ُExploit sqlmap -u '0day.gov/mims/updateacc…' --hex --time-sec=17 --dbms=mysql --technique=u --random-agent --eta -p account_type_number -D mims -T users --dump --os-shell ☝️@elvtnx

TheMsterDoctor1's tweet image. SQL injection vulnerability that can be used to escalate privileges and execute code.

#ُExploit

sqlmap -u '0day.gov/mims/updateacc…' --hex --time-sec=17 --dbms=mysql --technique=u --random-agent --eta -p account_type_number -D mims -T users --dump --os-shell
☝️@elvtnx

Meritus💤

@meritus_lux

. 10. 21.

Today wasn't funny, spent hours finding what was not lost, only to find out it's a lower case issue from mySQL and needed to change here on Vscode.

meritus_lux's tweet image. Today wasn't funny, spent hours finding what was not lost, only to find out it's a lower case issue from mySQL and needed to change here on Vscode.

RootMoksha Labs

@RootMoksha

2024. 2. 26.

SQL Injection on JSON body POST request. ``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs`` By:@nav1n0x #bugbountytips #bugbounty

RootMoksha's tweet image. SQL Injection on JSON body POST request.
``sqlmap -r request.txt --level=5 --risk=3 --force-ssl --ignore-code=500 --dbs``
By:@nav1n0x
#bugbountytips
#bugbounty

wangbin579

@wangbin579

. 9. 2.

A so-called top PostgreSQL expert in China discovered something shocking: MySQL violated transaction atomicity — one insert succeeded while another failed, yet the commit still went through.

wangbin579's tweet image. A so-called top PostgreSQL expert in China discovered something shocking: MySQL violated transaction atomicity — one insert succeeded while another failed, yet the commit still went through.

CVE

@CVEnew

4 분

CVE-2025-12282 A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function of the file /admin/manage-users.php. The manipu… cve.org/CVERecord?id=C…

HasanBroker

@DataBrokes

21 시간

kid aiko blames his SQL inquiries being broken on a php upgrade btw 😭😭😭😭

Suyash Sharma

@SuyashS91823422

2024. 7. 22.

Triaged of the day @Bugcrowd Blind SQL Injection #P1 #SQLI Tip:- Deep recon subdomain enumeration Site was using in #PHP >>fuzz Found /config.php>> used Arjun tool U= parameters and boom #SQLI #bugbountytips #bugbounty #bugcrowd

SuyashS91823422's tweet image. Triaged of the day @Bugcrowd
Blind SQL Injection
#P1 #SQLI
Tip:-
Deep recon subdomain enumeration
Site was using in #PHP &gt;&gt;fuzz
Found /config.php&gt;&gt; used Arjun tool
U= parameters and boom #SQLI
#bugbountytips #bugbounty #bugcrowd

Karim Habeeb

@NoRed0x

. 10. 21.

MYSQL Database credentials leaking in phpinfo Happy hunting! #bugbountytips #bugbountytip #cybersecurity #ethicalhacking

NoRed0x's tweet image. MYSQL Database credentials leaking in phpinfo Happy hunting!
#bugbountytips #bugbountytip #cybersecurity #ethicalhacking

N$

@nav1n0x

2024. 8. 1.

I just Published - A Comprehensive Guide to Manually Hunting SQL Injection in MSSQL, MySQL, Oracle, and NoSQL (MongoDB) - nav1n0x.gitbook.io/a-guide-to-man… I tried to explain everything I could. Let me know your opinion and suggestions, if any. I will keep updating the article whenever I…

nav1n0x's tweet image. I just Published - A Comprehensive Guide to Manually Hunting SQL Injection in MSSQL, MySQL, Oracle, and NoSQL (MongoDB) - nav1n0x.gitbook.io/a-guide-to-man…

I tried to explain everything I could. Let me know your opinion and suggestions, if any. I will keep updating the article whenever I…

UNDERCODE TESTING

@UndercodeUpdate

19 시간

📊 The SQL Injection Epidemic: Why Your Data is Never Safe undercodetesting.com/the-sql-inject… Educational Purposes!

The SQL Injection Epidemic: Why Your Data Is Never Safe - Undercode Testing

출처: undercodetesting.com

codervish

@codervish

. 10. 13.

yet semicolon ending statements/languages are bashed almost everyday

N$

@nav1n0x

2024. 4. 25.

Another day, another #SQLInjection. This time, it's in the User-Agent header, leading a full database takeover. Keep testing SQLi on everything and everywhere... #SQL #SQLinjection #BugBounty.