#sqlinjection 搜尋結果

🧠 Blind Time-Based SQLi 1️⃣ No error/data output 2️⃣ Uses time delays like IF(SUBSTRING((SELECT pwd FROM users WHERE id=1),1,1)='a', SLEEP(5),0) 3️⃣ Measures response time to infer data char-by-char 🎯 Extracts secrets without visible leaks #bugbounty #sqlinjection #blindsql

NullSecurityX's tweet image. 🧠 Blind Time-Based SQLi
1️⃣ No error/data output
2️⃣ Uses time delays like IF(SUBSTRING((SELECT pwd FROM users WHERE id=1),1,1)='a', SLEEP(5),0)
3️⃣ Measures response time to infer data char-by-char
🎯 Extracts secrets without visible leaks
#bugbounty #sqlinjection #blindsql

Is it really false positive? Or something else? @coffinxp7 could you please suggest me some tips! #sqlinjection #BugBounty

mijanhaque_'s tweet image. Is it really false positive? Or something else?
@coffinxp7  could you please suggest me some tips!
#sqlinjection #BugBounty

Sleep is optional, SQLi 💉 is mandatory 2 SQLi’s locked in, plus some sweet XSS’s on the side Climbing to Top 4 soon @intigriti 🤝 #BugBounty #SQLInjection #XSS #WebSecurity #EthicalHacking #Intigriti #BugHunter

5hady_'s tweet image. Sleep is optional, SQLi  💉 is mandatory 

2 SQLi’s locked in, plus some sweet XSS’s on the side 
Climbing to Top 4 soon @intigriti 🤝

#BugBounty #SQLInjection #XSS #WebSecurity #EthicalHacking #Intigriti #BugHunter

💉 SQL Injection Cheat Sheet — Protect Your Databases 🛡️ Quick overview of SQLi types, safe lab testing tips, and concrete defenses (parameterized queries & input validation). For educational and authorized testing only. #SQLInjection #WebSecurity #AppSec #SecureCoding

Anastasis_King's tweet image. 💉 SQL Injection Cheat Sheet — Protect Your Databases 🛡️

Quick overview of SQLi types, safe lab testing tips, and concrete defenses (parameterized queries & input validation). For educational and authorized testing only.

#SQLInjection #WebSecurity #AppSec #SecureCoding
Anastasis_King's tweet image. 💉 SQL Injection Cheat Sheet — Protect Your Databases 🛡️

Quick overview of SQLi types, safe lab testing tips, and concrete defenses (parameterized queries & input validation). For educational and authorized testing only.

#SQLInjection #WebSecurity #AppSec #SecureCoding
Anastasis_King's tweet image. 💉 SQL Injection Cheat Sheet — Protect Your Databases 🛡️

Quick overview of SQLi types, safe lab testing tips, and concrete defenses (parameterized queries & input validation). For educational and authorized testing only.

#SQLInjection #WebSecurity #AppSec #SecureCoding
Anastasis_King's tweet image. 💉 SQL Injection Cheat Sheet — Protect Your Databases 🛡️

Quick overview of SQLi types, safe lab testing tips, and concrete defenses (parameterized queries & input validation). For educational and authorized testing only.

#SQLInjection #WebSecurity #AppSec #SecureCoding

Government WEBSITE எல்லாம் easy இன்னொருத்தர் access பண்ணுகிற போல பாதுகாப்பற்ற நிலையில் தான் உள்ளது! #TNGovtHack #CyberAttackTN #SQLInjection #Krishinamoorthy #CyberSecurityIndia #EGovernance #TNPolice


Time-Based sql injection 😉⏲️, from @ProwlSec , as always thanks @coffinxp7 for the Amazing methodologies. Tips:Use waybackurl,filter alive urls,use gf |sqli| then do mass url scan in sqlmap or ghauri #BugBounty #bugbountytips #sqlinjection #Hacking #CyberSecurity

assa2940's tweet image. Time-Based sql injection 😉⏲️, from @ProwlSec , as always thanks @coffinxp7 for the Amazing methodologies. Tips:Use waybackurl,filter alive urls,use gf |sqli| then do mass url scan in sqlmap or ghauri
#BugBounty #bugbountytips #sqlinjection #Hacking #CyberSecurity

New research drop: Django CVE-2025-64459 is a critical SQL injection in the ORM. We explain the bug, share a PoC, and give hardening tips for Django teams. Read: hiddeninvestigations.net/blog/django-cv… #Django #AppSec #sqlinjection #CVE202564459 #hiddeninvestigations

hisecuritylab's tweet image. New research drop: Django CVE-2025-64459 is a critical SQL injection in the ORM.
We explain the bug, share a PoC, and give hardening tips for Django teams.

Read: hiddeninvestigations.net/blog/django-cv…

#Django #AppSec #sqlinjection #CVE202564459 #hiddeninvestigations

SQL Injection Basics: Attacker slips malicious SQL into queries via bad inputs, e.g., ' OR '1'='1 to bypass logins. Result? Data theft or DB wipeout. Always parametrize! #SQLInjection #AppSec

Ellyson06_'s tweet image. SQL Injection Basics: Attacker slips malicious SQL into queries via bad inputs, e.g., ' OR '1'='1 to bypass logins. Result? Data theft or DB wipeout. Always parametrize! #SQLInjection #AppSec

Ep 1 of my PortSwigger sprint: Found a quick win with classic SQLi! Bypassed a product filter to retrieve hidden data. Lesson: Never concatenate user input directly into SQL queries! #WebSec #SQLinjection #AppSec

T3chFalcon's tweet image. Ep 1 of my PortSwigger sprint: Found a quick win with classic SQLi! Bypassed a product filter to retrieve hidden data.

Lesson: Never concatenate user input directly into SQL queries! #WebSec #SQLinjection #AppSec

Fazendo um dump de tabela com o SQLMap sem o modo wizard é melhor? #sqlmap #sqli #sqlinjection #truehacking


🚨 VMware Avi Load Balancer Vulnerability (CVE-2025-22217, CVSS 8.6) 🚨 Unauthenticated blind SQL injection allows attackers to gain database access! 🔴 Affected: 30.1.1, 30.1.2, 30.2.1, 30.2.2 ✅ No workarounds – Update Now! #CyberSecurity #VMware #SQLInjection #bugbountytips

sirmatrixpage's tweet image. 🚨 VMware Avi Load Balancer Vulnerability (CVE-2025-22217, CVSS 8.6) 🚨

Unauthenticated blind SQL injection allows attackers to gain database access!

🔴 Affected: 30.1.1, 30.1.2, 30.2.1, 30.2.2
✅ No workarounds – Update Now!
#CyberSecurity #VMware #SQLInjection #bugbountytips

பள்ளி,கல்லூரி படிக்கும் மாணவர்களின் data இருக்கும் website பாதுகாப்பக இருப்பதில்லை! #TNGovtHack #CyberAttackTN #SQLInjection #Krishinamoorthy #CyberSecurityIndia #EGovernance #TNPolice


Housing Board Website -ல இப்படி ஒரு விஷயத்தை பண்ண முடியுமா? #TNGovtHack #CyberAttackTN #SQLInjection #Krishinamoorthy #CyberSecurityIndia #EGovernance #TNPolice


SQL Injection has been #1 on OWASP Top 10 for decades. It's not a complex attack - it's basic input validation failure. Parameterized queries eliminate 99% of SQLi vulnerabilities. Why are we still seeing this? #SQLInjection #WebSecurity #owasp

ma113_tp's tweet image. SQL Injection has been #1 on OWASP Top 10 for decades. It's not a complex attack - it's basic input validation failure. Parameterized queries eliminate 99% of SQLi vulnerabilities. Why are we still seeing this?

#SQLInjection #WebSecurity #owasp

Curious about SQL Injection? Learn how to use sqlmap to exploit MySQL databases and uncover hidden data on vulnerable websites. Dive in now: hackers-arise.net/2023/12/04/dat… #SQLInjection #sqlmap #WebSecurity @three_cube

_aircorridor's tweet image. Curious about SQL Injection? Learn how to use sqlmap to exploit MySQL databases and uncover hidden data on vulnerable websites.

Dive in now: hackers-arise.net/2023/12/04/dat…
#SQLInjection #sqlmap #WebSecurity @three_cube

If your login still dies to ' OR 1=1-- in 2025… just say you want me to CTF your production. #BugBounty #SQLInjection #DevSecOps #CyberSecurity #cybersecuritytips #buildinpublic #100DaysOfHacking


Keep the database safe! 🗄️ Test @Pact_Swap for SQL injection vulnerabilities. Your hacking skills make our defense stronger. #SQLInjection #PactSwapTestnet


5⃣La seguridad no es una característica opcional, es un requisito de calidad. Audita tu código y estandariza el uso de ORMs o Prepared Statements en nuevos desarrollos. Protege la integridad de tu infraestructura. 🛡️ #DevSecOps #SQLInjection #Ciberseguridad #Programming


Stored procedures aren't a magic security bullet. Parameterized queries in app code offer the SAME SQL injection protection. Tools like Dapr make safe DB queries easy. Follow best practices; ditch stored procedures. #SQLInjection #Dapr


Vulnerabilidades reales explicadas en 30s #SQLInjection #Pentesting #Ciberseguridad


How to prevent #SQLInjection? ○ Parameterized query to avoid directly concatenating #SQL. ○ #WAF Department ○ Regular Audit: Use tools (such as SQLMap) ○ Access Control: Database users should be granted only the minimum privileges to prevent a complete loss of control.

mylinkingcom's tweet image. How to prevent #SQLInjection?

○  Parameterized query to avoid directly concatenating #SQL.
○  #WAF Department
○  Regular Audit: Use tools (such as SQLMap)
○  Access Control: Database users should be granted only the minimum privileges to prevent a complete loss of control.

🛡️ Daily Security Tip: Safeguard your databases from SQL injection attacks! Use parameterized queries or prepared statements to validate user inputs. 🛠️ Keep your software updated & conduct regular security audits. Stay safe! 💻🔒 #CyberSecurity #SQLInjection


SQL Injection Basics: Attacker slips malicious SQL into queries via bad inputs, e.g., ' OR '1'='1 to bypass logins. Result? Data theft or DB wipeout. Always parametrize! #SQLInjection #AppSec

Ellyson06_'s tweet image. SQL Injection Basics: Attacker slips malicious SQL into queries via bad inputs, e.g., ' OR '1'='1 to bypass logins. Result? Data theft or DB wipeout. Always parametrize! #SQLInjection #AppSec

Injection Techniques Test different SQLi types: --technique=B # Boolean-based blind --technique=E # Error-based --technique=U # UNION query --technique=T # Time-based blind --technique=S # Stacked queries #SQLInjection


New research drop: Django CVE-2025-64459 is a critical SQL injection in the ORM. We explain the bug, share a PoC, and give hardening tips for Django teams. Read: hiddeninvestigations.net/blog/django-cv… #Django #AppSec #sqlinjection #CVE202564459 #hiddeninvestigations

hisecuritylab's tweet image. New research drop: Django CVE-2025-64459 is a critical SQL injection in the ORM.
We explain the bug, share a PoC, and give hardening tips for Django teams.

Read: hiddeninvestigations.net/blog/django-cv…

#Django #AppSec #sqlinjection #CVE202564459 #hiddeninvestigations

Day 28 — API7: Injection Vulnerabilities 💉 Learned SQL & NoSQL injection! SQL: admin' OR '1'='1'-- bypasses login NoSQL: {"$ne": null} breaks MongoDB queries Never trust user input. Always use parameterized queries! #Day28 #APISecurity #SQLInjection #NoSQLInjection #OWASP

localhost12001's tweet image. Day 28 — API7: Injection Vulnerabilities 💉
Learned SQL & NoSQL injection!
SQL: admin' OR '1'='1'-- bypasses login NoSQL: {"$ne": null} breaks MongoDB queries
Never trust user input. Always use parameterized queries!
#Day28 #APISecurity #SQLInjection #NoSQLInjection #OWASP

🔒 SQL Injection باختصار هجوم يسمح للمهاجم بحقن أوامر داخل قاعدة البيانات من خلال إدخال خبيث في الحقول أو الروابط. خطورته؟ ممكن يكشف بيانات المستخدمين، يعدّل عليها، أو حتى يحذفها بالكامل. #CyberSecurity #SQLInjection #InfoSec #WebSecurity #Pentesting #BugBounty #CyberTips

Aaedhany's tweet image. 🔒 SQL Injection باختصار
هجوم يسمح للمهاجم بحقن أوامر داخل قاعدة البيانات من خلال إدخال خبيث في الحقول أو الروابط. خطورته؟ ممكن يكشف بيانات المستخدمين، يعدّل عليها، أو حتى يحذفها بالكامل.

#CyberSecurity #SQLInjection #InfoSec #WebSecurity #Pentesting #BugBounty #CyberTips
Aaedhany's tweet image. 🔒 SQL Injection باختصار
هجوم يسمح للمهاجم بحقن أوامر داخل قاعدة البيانات من خلال إدخال خبيث في الحقول أو الروابط. خطورته؟ ممكن يكشف بيانات المستخدمين، يعدّل عليها، أو حتى يحذفها بالكامل.

#CyberSecurity #SQLInjection #InfoSec #WebSecurity #Pentesting #BugBounty #CyberTips
Aaedhany's tweet image. 🔒 SQL Injection باختصار
هجوم يسمح للمهاجم بحقن أوامر داخل قاعدة البيانات من خلال إدخال خبيث في الحقول أو الروابط. خطورته؟ ممكن يكشف بيانات المستخدمين، يعدّل عليها، أو حتى يحذفها بالكامل.

#CyberSecurity #SQLInjection #InfoSec #WebSecurity #Pentesting #BugBounty #CyberTips
Aaedhany's tweet image. 🔒 SQL Injection باختصار
هجوم يسمح للمهاجم بحقن أوامر داخل قاعدة البيانات من خلال إدخال خبيث في الحقول أو الروابط. خطورته؟ ممكن يكشف بيانات المستخدمين، يعدّل عليها، أو حتى يحذفها بالكامل.

#CyberSecurity #SQLInjection #InfoSec #WebSecurity #Pentesting #BugBounty #CyberTips

Key points: The flaw allows attackers to potentially compromise the entire database. ⚠️ #SQLInjection


SQL Injection After this, I used ghauri to extract the database It was successful -11+PROCEDURE+ANALYSE(EXTRACTVALUE(9859,CONCAT(0x5c,(BENCHMARK(110000000,MD5(0x7562756f))))),1)-- #sqlinjection #ghauri #bugbounty #bugbountytips

lu3ky13's tweet image. SQL Injection

After this, I used ghauri to extract the database It was successful

-11+PROCEDURE+ANALYSE(EXTRACTVALUE(9859,CONCAT(0x5c,(BENCHMARK(110000000,MD5(0x7562756f))))),1)--

#sqlinjection #ghauri #bugbounty #bugbountytips

Time-based blind SQLI parameter: test payload: '+AND+(SELECT+2016+FROM+(SELECT(SLEEP(15)))SIfv)+AND+'vDZP'%3d'vDZP #bugbounty #bugbountytips #sqlinjection #sqli

zapstiko's tweet image. Time-based blind SQLI

parameter: test
payload: '+AND+(SELECT+2016+FROM+(SELECT(SLEEP(15)))SIfv)+AND+'vDZP'%3d'vDZP

#bugbounty #bugbountytips #sqlinjection #sqli

🧠 Blind Time-Based SQLi 1️⃣ No error/data output 2️⃣ Uses time delays like IF(SUBSTRING((SELECT pwd FROM users WHERE id=1),1,1)='a', SLEEP(5),0) 3️⃣ Measures response time to infer data char-by-char 🎯 Extracts secrets without visible leaks #bugbounty #sqlinjection #blindsql

NullSecurityX's tweet image. 🧠 Blind Time-Based SQLi
1️⃣ No error/data output
2️⃣ Uses time delays like IF(SUBSTRING((SELECT pwd FROM users WHERE id=1),1,1)='a', SLEEP(5),0)
3️⃣ Measures response time to infer data char-by-char
🎯 Extracts secrets without visible leaks
#bugbounty #sqlinjection #blindsql

Sql Injection Payload : -10'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #bugbountytips #BugBounty #SqlInjection

lu3ky13's tweet image. Sql Injection 

Payload : -10'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z

#bugbountytips  #BugBounty #SqlInjection

🔥 Sql Injection Payload : -10'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z credit: @lu3ky13 #bugbountytips #BugBounty #SqlInjection

WllGates's tweet image. 🔥 Sql Injection 

Payload : -10'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z

credit: @lu3ky13 

#bugbountytips  #BugBounty #SqlInjection

Use this DORK to Find #SQLinjection: site:target. com inurl:php/?id= More Ways: youtu.be/CbdsidSQXps

Cyber78678's tweet image. Use this DORK  to Find #SQLinjection: 

site:target. com inurl:php/?id=

More Ways: youtu.be/CbdsidSQXps

💸 Sending payload within the URL/URI itself can also trigger SQL injection. So don't just focus on the parameters. credit: @scoutbug2 #SQLInjection #BugBounty

WllGates's tweet image. 💸 Sending payload within the URL/URI itself can also trigger SQL injection. So don't just focus on the parameters.

credit: @scoutbug2 

 #SQLInjection #BugBounty

Sleep is optional, SQLi 💉 is mandatory 2 SQLi’s locked in, plus some sweet XSS’s on the side Climbing to Top 4 soon @intigriti 🤝 #BugBounty #SQLInjection #XSS #WebSecurity #EthicalHacking #Intigriti #BugHunter

5hady_'s tweet image. Sleep is optional, SQLi  💉 is mandatory 

2 SQLi’s locked in, plus some sweet XSS’s on the side 
Climbing to Top 4 soon @intigriti 🤝

#BugBounty #SQLInjection #XSS #WebSecurity #EthicalHacking #Intigriti #BugHunter

Cómo convertirse en Tripulante Aéreo Autorizado con un SQL Injection Level 1 (y saltarse las colas de seguridad de los aeropuertos) elladodelmal.com/2024/08/como-c… Si es que se puede usar el SQL Injection hasta para ligar... #SQLi #SQLInjection #Hacking #Pentest #aeropuerto

chemaalonso's tweet image. Cómo convertirse en Tripulante Aéreo Autorizado con un SQL Injection Level 1 (y saltarse las colas de seguridad de los aeropuertos) elladodelmal.com/2024/08/como-c…  Si es que se puede usar el SQL Injection hasta para ligar... #SQLi #SQLInjection #Hacking #Pentest #aeropuerto

Is it really false positive? Or something else? @coffinxp7 could you please suggest me some tips! #sqlinjection #BugBounty

mijanhaque_'s tweet image. Is it really false positive? Or something else?
@coffinxp7  could you please suggest me some tips!
#sqlinjection #BugBounty

Time-Based sql injection 😉⏲️, from @ProwlSec , as always thanks @coffinxp7 for the Amazing methodologies. Tips:Use waybackurl,filter alive urls,use gf |sqli| then do mass url scan in sqlmap or ghauri #BugBounty #bugbountytips #sqlinjection #Hacking #CyberSecurity

assa2940's tweet image. Time-Based sql injection 😉⏲️, from @ProwlSec , as always thanks @coffinxp7 for the Amazing methodologies. Tips:Use waybackurl,filter alive urls,use gf |sqli| then do mass url scan in sqlmap or ghauri
#BugBounty #bugbountytips #sqlinjection #Hacking #CyberSecurity

The doctor's in 💉 A brand new #HTBAcademy module is here to teach you advanced #SQLInjection techniques focusing on: 💢 White-box testing 💢 Java/Spring 💢 PostgreSQL Start learning: academy.hackthebox.com/course/preview… #HTB #HackTheBox #CyberSecurity #InfoSec

hackthebox_eu's tweet image. The doctor's in 💉
A brand new #HTBAcademy module is here to teach you advanced #SQLInjection techniques focusing on: 
💢 White-box testing 
💢 Java/Spring
💢 PostgreSQL 
Start learning: academy.hackthebox.com/course/preview…

#HTB #HackTheBox #CyberSecurity #InfoSec

🚀 Just created a Python script for detecting SQL injection vulnerabilities! 🛡️ Will be uploading it to GitHub soon. Stay tuned for more updates! #CyberSecurity #SQLInjection #Python #BugBounty #InfoSec

wgujjer11's tweet image. 🚀 Just created a Python script for detecting SQL injection vulnerabilities! 🛡️ Will be uploading it to GitHub soon. Stay tuned for more updates! #CyberSecurity #SQLInjection #Python #BugBounty #InfoSec

Critical SQLi Discovered on @Hacker0x01 Private Program 👀 When You Find Origin IP Test Every Functionality Maybe You Found some other Cool Bugs #bugbounty #sqlinjection #websecurity #Pentesting

mujtabasec's tweet image. Critical SQLi Discovered on @Hacker0x01 Private Program 👀
When You Find Origin IP Test Every Functionality 
Maybe You Found some other Cool Bugs 
#bugbounty  #sqlinjection #websecurity  #Pentesting

Curious about SQL Injection? Learn how to use sqlmap to exploit MySQL databases and uncover hidden data on vulnerable websites. Dive in now: hackers-arise.net/2023/12/04/dat… #SQLInjection #sqlmap #WebSecurity @three_cube

_aircorridor's tweet image. Curious about SQL Injection? Learn how to use sqlmap to exploit MySQL databases and uncover hidden data on vulnerable websites.

Dive in now: hackers-arise.net/2023/12/04/dat…
#SQLInjection #sqlmap #WebSecurity @three_cube

Loading...

Something went wrong.


Something went wrong.


United States Trends