English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#sqlı search results

viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 16

If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); Post Credit: @0x0SojalSec #bugbounty #bugbountytips #rce #sqli #bugbounty

viehgroup's tweet image. If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); Post Credit: @0x0SojalSec #bugbounty #bugbountytips #rce #sqli #bugbounty
5
122
594
432
27K
bughuntar's profile picture. Security Researcher at HackerOne | Multiple CVE Honoree | Google Hall of Fame Rank 1st (Bangladesh) | #FreePalestine 🇵🇸 🇧🇩
Professor the Hunter
@bughuntar
Oct 20

🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

bughuntar's tweet image. 🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection
8
83
423
381
19K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jan 22

For GraphQL endpoints, test #SQLi in the query’s arguments or nested filters. Many devs overlook injection vectors in #GraphQL resolvers. #BugBountyTips #SQLi

nav1n0x's tweet image. For GraphQL endpoints, test #SQLi in the query’s arguments or nested filters. Many devs overlook injection vectors in #GraphQL resolvers. #BugBountyTips #SQLi
8
37
480
258
22K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 1

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
509
367
25K
wtf_brut's profile picture. I'm world last $0 million dollar hacker.
Brut 🇮🇳
@wtf_brut
Jan 8

🚨403 Bypass list by @jhaddix Url Manipulation Methods Top 77 ways to bypass access control🚨 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #ssrf #AEM

wtf_brut's tweet image. 🚨403 Bypass list by @jhaddix Url Manipulation Methods Top 77 ways to bypass access control🚨 #bugbountytip #bugbountytips #ethicalhacking #CyberSecurity #Pentesting #sqli #xss #CyberSecurityAwareness #bugbounty #ssrf #AEM
1
30
151
116
8K
0x0SojalSec's profile picture. Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project AI-StrikeSec || 0ld Accounts Suspended @0xSojalSec ||
Md Ismail Šojal 🕷️
 @0x0SojalSec
Jan 19

If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli

0x0SojalSec's tweet image. If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli
6
149
788
575
44K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jul 6

Discovered a very interesting path based SQLi yesterday. Injected: /‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay /page/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/test.test triggered delay. Same payload, different results. Here's why👇 1/4 #BugBounty #SQLi #WebSec

nav1n0x's tweet image. Discovered a very interesting path based SQLi yesterday. Injected: /‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay /page/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/test.test triggered delay. Same payload, different results. Here's why👇 1/4 #BugBounty #SQLi #WebSec
6
117
626
459
39K
0xElkot's profile picture. Cyber Security Consultant | Security Researcher (Part time)
MahMoud Elkot
 @0xElkot
Apr 16

🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi

0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
0xElkot's tweet image. 🔍 Tip for finding SQLi in WordPress plugins: - Study the code—check $wpdb queries & inputs. - Enumerate endpoints, forms, params w/ WPScan or manually. - Test for SQLi w/ payloads like ' OR 1=1 --. 💡 Might lead to a private CVE! Stay ethical #BugBounty #SQLi
2
16
137
93
6K
wtf_brut's profile picture. I'm world last $0 million dollar hacker.
Brut 🇮🇳
@wtf_brut
Jan 24

⚡️SQLi Time Based Payloads ✅Join Telegram to Download- t.me/brutsecurity/1… #sqli #bugbounty #bugbountytips

wtf_brut's tweet image. ⚡️SQLi Time Based Payloads ✅Join Telegram to Download- t.me/brutsecurity/1… #sqli #bugbounty #bugbountytips
2
17
104
57
4K
kuldeepdotexe's profile picture. OSINT | Web | Binary | sensei@barracks.army | @SynackRedTeam Envoy && Hero
Kuldeep Pandya
 @kuldeepdotexe
Nov 2, 2024

🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt

kuldeepdotexe's tweet image. 🕷️Exploiting Unconventional SQLis Manually 💉 A thread 🧵 1/n #sqli #synack #srt
15
99
625
515
57K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
May 23, 2024

Steps: 1. Get all urls (waymore) 2. Extract all Parameters (paramspider) 3. Use nuclei dast templates nuclei -l parameter_based_urls.txt -t nuclei-templates/dast/ -dast Post Credit: Mijanur Rahman #hackerone #ethicalhacking #bugbounty #cybersecurity #sqli #xss #infosec

viehgroup's tweet image. Steps: 1. Get all urls (waymore) 2. Extract all Parameters (paramspider) 3. Use nuclei dast templates nuclei -l parameter_based_urls.txt -t nuclei-templates/dast/ -dast Post Credit: Mijanur Rahman #hackerone #ethicalhacking #bugbounty #cybersecurity #sqli #xss #infosec
0
69
221
234
14K
Mr_Dark55's profile picture. Bug Bounty | Pentester | Ethical Hacking | 孤独が私の中に染み込んでほしい。🖤
./Mr-Dark
 @Mr_Dark55
Dec 30

💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli

Mr_Dark55's tweet image. 💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli
10
44
329
193
16K
wgujjer11's profile picture. Cybersecurity Analyst | Ethical Hacker | Secure @nasa | #CyberSecurity #
Muhammad Waseem
 @wgujjer11
Apr 3

Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799

wgujjer11's tweet image. Pre-Auth SQL Injection CVE-2025-24799 Severity : Critical Exploit : github.com/MuhammadWaseem… Refrence : github.com/glpi-project/g… #GLPI #SQLi #CVE202524799
5
96
491
281
22K
Raman_Mohurle's profile picture. Microsoft MVR 2024 | MSRC #44 in 2022 Q3 | GPCSSI Intern | RHCSA | N+ | Bug Bounty Hunter | Ethical Hacker 👩‍💻 #GPCSSI21 #BUGBOUNTY
Raman_MG
 @Raman_Mohurle
Sep 7

Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…

Raman_Mohurle's tweet image. Found an untouched asset (built in 2018) with an unsubscribe functionality. Turned out it was vulnerable to time-based blind SQLi → from a single entry point I accessed 200+ databases. Patience + curiosity always pay off 💰€€€€ #BugBounty #SQLi #bugbountytips Thread 🧵…
5
23
312
154
29K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Jun 13

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
nav1n0x's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
7
119
716
531
30K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Nov 6

🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

viehgroup's tweet image. 🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection
0
5
25
21
1K
mehdi_badami's profile picture. Security Researcher | VAPT | trying to do better 💯
BinaryAssassin
 @mehdi_badami
Nov 4

DAY 3-5/30 Deep-dive on SSRF research to strengthen real-world exploitation skills Completed 2/18 SQLi labs on @PortSwigger 💯 #BugBounty #SSRF #SQLi #WebSecurity #Infosec

0
0
1
0
92
BlackLanternLLC's profile picture.
Black Lantern Security (BLSOPS)
 @BlackLanternLLC
Nov 3

🚨 CVE-2025-12463: an unauth’d SQL injection that, when skillfully weaponized, can leak or overwrite critical data. PoC + full teardown + hardening tips are live. Full details👇blog.blacklanternsecurity.com/p/cve-2025-124… #infosec #CVE #SQLi

BlackLanternLLC's tweet card. Smile, you’re on camera.
CVE-2025-12463— 9.8 Unauthenticated SQL Injection in Guetebruck G-Cam Series Cameras
Source: blog.blacklanternsecurity.com
0
2
0
2
171
theboyusuf's profile picture. Offensive Security | AppSec+CloudSec | Pentester🔴. Realmadrid⚽️
Yusuf
 @theboyusuf
Nov 1

This Week,leveled up recon (Sublist3r, ffuf, gobuster) and web vuln skills — practiced XXE, path traversal,finally completed the rest of SQL labs and more XSS exercises in portswigger academy . Ready to start responsible bug hunting. #AppSec #Infosec #XSS #SQLi

theboyusuf's tweet image. This Week,leveled up recon (Sublist3r, ffuf, gobuster) and web vuln skills — practiced XXE, path traversal,finally completed the rest of SQL labs and more XSS exercises in portswigger academy . Ready to start responsible bug hunting. #AppSec #Infosec #XSS #SQLi
theboyusuf's tweet image. This Week,leveled up recon (Sublist3r, ffuf, gobuster) and web vuln skills — practiced XXE, path traversal,finally completed the rest of SQL labs and more XSS exercises in portswigger academy . Ready to start responsible bug hunting. #AppSec #Infosec #XSS #SQLi
theboyusuf's tweet image. This Week,leveled up recon (Sublist3r, ffuf, gobuster) and web vuln skills — practiced XXE, path traversal,finally completed the rest of SQL labs and more XSS exercises in portswigger academy . Ready to start responsible bug hunting. #AppSec #Infosec #XSS #SQLi
theboyusuf's tweet image. This Week,leveled up recon (Sublist3r, ffuf, gobuster) and web vuln skills — practiced XXE, path traversal,finally completed the rest of SQL labs and more XSS exercises in portswigger academy . Ready to start responsible bug hunting. #AppSec #Infosec #XSS #SQLi
0
0
2
0
111
MNovofastovsky's profile picture. Protecting websites from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed Website Security
 @MNovofastovsky
Oct 31

🚨CVE-2025-9322 Stripe Payment Forms by WP Full Pay ≤8.3.1 is vulnerable to SQL Injection, allowing attackers to extract sensitive data 🔹 Update now 🔹 Scan for #Malware with Malware Scanner → quttera.com #CVE #WordPressSecurity #SQLi #CyberSecurity #WordPRess

MNovofastovsky's tweet image. 🚨CVE-2025-9322 Stripe Payment Forms by WP Full Pay ≤8.3.1 is vulnerable to SQL Injection, allowing attackers to extract sensitive data 🔹 Update now 🔹 Scan for #Malware with Malware Scanner → quttera.com #CVE #WordPressSecurity #SQLi #CyberSecurity #WordPRess
0
0
0
0
70
MNovofastovsky's profile picture. Protecting websites from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed Website Security
 @MNovofastovsky
Oct 31

💡 Why it matters: Attackers can steal or corrupt your data through malicious queries. 🛡️ Action: Deploy Quttera Website Protection to block SQLi payloads at the WAF layer. #SQLi #WebAppSecurity #Quttera #Website #Malware

MNovofastovsky's tweet image. 💡 Why it matters: Attackers can steal or corrupt your data through malicious queries. 🛡️ Action: Deploy Quttera Website Protection to block SQLi payloads at the WAF layer. #SQLi #WebAppSecurity #Quttera #Website #Malware
0
0
0
0
17
MNovofastovsky's profile picture. Protecting websites from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed Website Security
 @MNovofastovsky
Oct 30

🚫CVE-2025-11893 Charitable – Donation Plugin ≤1.8.8.4 is vulnerable to SQL Injection, allowing data theft. Update now & scan with Quttera Website Malware Scanner → quttera.com #CVE #WordPress #WordPressSecurity #SQLi #CyberSecurity

MNovofastovsky's tweet image. 🚫CVE-2025-11893 Charitable – Donation Plugin ≤1.8.8.4 is vulnerable to SQL Injection, allowing data theft. Update now & scan with Quttera Website Malware Scanner → quttera.com #CVE #WordPress #WordPressSecurity #SQLi #CyberSecurity
0
0
0
0
99
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Oct 30

🐞Bug Bounty Tips How to Find SQL Injection in Registration Page? Try this in the username/email injection point: zurl.co/W0F6A #bugbountytips #bugbounty #bugbountytips #sqli #CyberSecurity #sqlinjection

viehgroup's tweet image. 🐞Bug Bounty Tips How to Find SQL Injection in Registration Page? Try this in the username/email injection point: zurl.co/W0F6A #bugbountytips #bugbounty #bugbountytips #sqli #CyberSecurity #sqlinjection
0
10
72
44
2K
MNovofastovsky's profile picture. Protecting websites from malware, zero-day exploits, and real-world threats. CTO @Quttera | Cybersecurity advocate | Managed Website Security
Quttera - Managed Website Security
 @MNovofastovsky
Oct 29

#WordPress: Detect SQLi, XSS, and RFI attempts before they succeed. Enable Website Protection (WAF). quttera.com #SQLi #XSS #MalwareProtection

MNovofastovsky's tweet image. #WordPress: Detect SQLi, XSS, and RFI attempts before they succeed. Enable Website Protection (WAF). quttera.com #SQLi #XSS #MalwareProtection
0
0
0
0
23
timd1gga's profile picture.
Tim
 @timd1gga
Oct 28

And another proof that SQL injection still exists in 2025 :) Exposing more than 100 admin accounts with passwords and personal informations. Site directly got notified about it dw. #SQL #SQLI #Vulnerability #BugBounty

timd1gga's tweet image. And another proof that SQL injection still exists in 2025 :) Exposing more than 100 admin accounts with passwords and personal informations. Site directly got notified about it dw. #SQL #SQLI #Vulnerability #BugBounty
0
0
1
0
43
EsGeeks's profile picture. Hacemos las cosas fáciles. Aprende con nosotros y siéntete apasionado por la tecnología e informática. Geek! #Tips #Tricks #Hacking #Ciberseguridad
Es Geeks
 @EsGeeks
Oct 25

Domina la cadena de ataque completa: SQLi ➡️ RCE ➡️ PrivEsc. Este playground en Docker te permite practicar la explotación de PostgreSQL en un entorno seguro y realista. ¡Un desafío esencial para todo pentester! Link: github.com/filipkarc/sqli… 💥🧪 #SQLi #HackingEtico #Pentesting

EsGeeks's tweet image. Domina la cadena de ataque completa: SQLi ➡️ RCE ➡️ PrivEsc. Este playground en Docker te permite practicar la explotación de PostgreSQL en un entorno seguro y realista. ¡Un desafío esencial para todo pentester! Link: github.com/filipkarc/sqli… 💥🧪 #SQLi #HackingEtico #Pentesting
0
18
87
50
3K
theboyusuf's profile picture. Offensive Security | AppSec+CloudSec | Pentester🔴. Realmadrid⚽️
Yusuf
 @theboyusuf
Oct 25

This week Lab-only: practiced SQLi DB enumeration (Oracle & non-Oracle), extracted schema info and demonstrated admin account takeover in authorized labs — focused on impact analysis and remediation. #AppSec #SQLi #CTF #Infosec

theboyusuf's tweet image. This week Lab-only: practiced SQLi DB enumeration (Oracle & non-Oracle), extracted schema info and demonstrated admin account takeover in authorized labs — focused on impact analysis and remediation. #AppSec #SQLi #CTF #Infosec
theboyusuf's tweet image. This week Lab-only: practiced SQLi DB enumeration (Oracle & non-Oracle), extracted schema info and demonstrated admin account takeover in authorized labs — focused on impact analysis and remediation. #AppSec #SQLi #CTF #Infosec
theboyusuf's tweet image. This week Lab-only: practiced SQLi DB enumeration (Oracle & non-Oracle), extracted schema info and demonstrated admin account takeover in authorized labs — focused on impact analysis and remediation. #AppSec #SQLi #CTF #Infosec
theboyusuf's tweet image. This week Lab-only: practiced SQLi DB enumeration (Oracle & non-Oracle), extracted schema info and demonstrated admin account takeover in authorized labs — focused on impact analysis and remediation. #AppSec #SQLi #CTF #Infosec
0
0
1
1
149
localhost12001's profile picture. SOC Analyst. 📈 Aspiring Penetration Tester and Bug Bounty Hunter.🏹
MAYUR SAPKALE
 @localhost12001
Oct 22

Day 1/30 — SQLi basics with sqlmap: An automated tool to find & exploit SQL injection (error, boolean, UNION, time, stacked, inline). Quick tip: test only on authorised targets. 🚨 sqlmap -u "http://lab.local/item.php?id=2" -p id --dbs #30DayChallenge #SQLi #infosec

localhost12001's tweet image. Day 1/30 — SQLi basics with sqlmap: An automated tool to find & exploit SQL injection (error, boolean, UNION, time, stacked, inline). Quick tip: test only on authorised targets. 🚨 sqlmap -u "http://lab.local/item.php?id=2" -p id --dbs #30DayChallenge #SQLi #infosec
0
0
0
0
28
bughuntar's profile picture. Security Researcher at HackerOne | Multiple CVE Honoree | Google Hall of Fame Rank 1st (Bangladesh) | #FreePalestine 🇵🇸 🇧🇩
Professor the Hunter
@bughuntar
Oct 20

🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

bughuntar's tweet image. 🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection
8
83
423
381
19K
theboyusuf's profile picture. Offensive Security | AppSec+CloudSec | Pentester🔴. Realmadrid⚽️
Yusuf
 @theboyusuf
Oct 19

SQLi work: practiced login bypass, used ORDER BY and UNION to enumerate columns and fingerprint DBs — all in controlled labs. #SQLi

theboyusuf's tweet image. SQLi work: practiced login bypass, used ORDER BY and UNION to enumerate columns and fingerprint DBs — all in controlled labs. #SQLi
theboyusuf's tweet image. SQLi work: practiced login bypass, used ORDER BY and UNION to enumerate columns and fingerprint DBs — all in controlled labs. #SQLi
theboyusuf's tweet image. SQLi work: practiced login bypass, used ORDER BY and UNION to enumerate columns and fingerprint DBs — all in controlled labs. #SQLi
0
0
1
0
83
jsmonsh's profile picture. 🔥 JavaScript Security Simplified 🕵️‍♂️ Monitor, Scan & Detect JS Threats 🚀 Trusted by 2K+ Users | 1M+ JS files 🌐 Start Securing: https://t.co/KAxMTnrEmT
Jsmon - jsmon.sh
 @jsmonsh
Oct 17

2.Bypass Tricks and exploitation methods #sqli #bugbounty

jsmonsh's tweet image. 2.Bypass Tricks and exploitation methods #sqli #bugbounty
1
2
13
6
1K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 16

If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); Post Credit: @0x0SojalSec #bugbounty #bugbountytips #rce #sqli #bugbounty

viehgroup's tweet image. If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); Post Credit: @0x0SojalSec #bugbounty #bugbountytips #rce #sqli #bugbounty
5
122
594
432
27K
bughuntar's profile picture. Security Researcher at HackerOne | Multiple CVE Honoree | Google Hall of Fame Rank 1st (Bangladesh) | #FreePalestine 🇵🇸 🇧🇩
Professor the Hunter
@bughuntar
Oct 20

🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection

bughuntar's tweet image. 🐞Bug Bounty Tips🐞 🕷️How to Find SQL Injection in Registration Page? 🐜Try this in the username/email injection point: #bugbountytips #bugbounty #bugbountytips #sqli #Professor #CyberSecurity #sqlinjection
8
83
423
381
19K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Sep 1

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
509
367
25K
bughuntar's profile picture. Security Researcher at HackerOne | Multiple CVE Honoree | Google Hall of Fame Rank 1st (Bangladesh) | #FreePalestine 🇵🇸 🇧🇩
Professor the Hunter
@bughuntar
Mar 26, 2023

How to find SQL injection on the Registration page? Try SQL Injection in Email Address (username) #bugbountytips #bugbounty #bugbountytips #sqli

bughuntar's tweet image. How to find SQL injection on the Registration page? Try SQL Injection in Email Address (username) #bugbountytips #bugbounty #bugbountytips #sqli
27
317
1K
514
75K
viehgroup's profile picture. We're hacking for your better Future
VIEH Group
 @viehgroup
Jan 27

If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli #cybersecurity

viehgroup's tweet image. If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli #cybersecurity
1
27
174
89
6K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
May 19, 2024

Cool Blind #SQLi. The target has an admin login page where certain methods are allowed. I found the API endpoint for the admin login and sent the same payload. Success. POST /admin/login ==> 405 POST /api/v01/admin/login ==> 200 OK + Blind SQLi #bugbounty #SQLi

nav1n0x's tweet image. Cool Blind #SQLi. The target has an admin login page where certain methods are allowed. I found the API endpoint for the admin login and sent the same payload. Success. POST /admin/login ==> 405 POST /api/v01/admin/login ==> 200 OK + Blind SQLi #bugbounty #SQLi
nav1n0x's tweet image. Cool Blind #SQLi. The target has an admin login page where certain methods are allowed. I found the API endpoint for the admin login and sent the same payload. Success. POST /admin/login ==> 405 POST /api/v01/admin/login ==> 200 OK + Blind SQLi #bugbounty #SQLi
18
81
523
295
29K
SuyashS91823422's profile picture. Security Engineer| Helping companies to secure their digital assets
Suyash Sharma
 @SuyashS91823422
Jul 22, 2024

Triaged of the day @Bugcrowd Blind SQL Injection #P1 #SQLI Tip:- Deep recon subdomain enumeration Site was using in #PHP >>fuzz Found /config.php>> used Arjun tool U= parameters and boom #SQLI #bugbountytips #bugbounty #bugcrowd

SuyashS91823422's tweet image. Triaged of the day @Bugcrowd Blind SQL Injection #P1 #SQLI Tip:- Deep recon subdomain enumeration Site was using in #PHP >>fuzz Found /config.php>> used Arjun tool U= parameters and boom #SQLI #bugbountytips #bugbounty #bugcrowd
17
46
389
182
19K
bughuntar's profile picture. Security Researcher at HackerOne | Multiple CVE Honoree | Google Hall of Fame Rank 1st (Bangladesh) | #FreePalestine 🇵🇸 🇧🇩
Professor the Hunter
@bughuntar
Aug 27, 2023

Use these payloads on the Email field during registration. #bugbountytips #bugbounty #ssti #penetration #sqli #xss #ssrf

bughuntar's tweet image. Use these payloads on the Email field during registration. #bugbountytips #bugbounty #ssti #penetration #sqli #xss #ssrf
9
108
415
257
34K
Mr_Dark55's profile picture. Bug Bounty | Pentester | Ethical Hacking | 孤独が私の中に染み込んでほしい。🖤
./Mr-Dark
 @Mr_Dark55
Dec 30

💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli

Mr_Dark55's tweet image. 💉 SQL injection bypassing Cloudflare When testing a site, you can bypass Cloudflare's SQL injection protection using sqlmap and a combination of space2comment, between, randomcase tamper scripts. #web #sqli
10
44
329
193
16K
zapstiko's profile picture. 𝐒𝐜𝐡𝐫ö𝐝𝐢𝐧𝐠𝐞𝐫'𝐬 𝐒𝐦𝐢𝐥𝐞𝐲 :): 🕊✪ ❁ 𖤐 🪲✪ 𓃵 Ⓧ👽★ (⚡, 🥷)𝕏
𝐑𝐀𝐢𝐡𝐚𝐧 ✪
 @zapstiko
Jul 26, 2024

Time-Base SQL Injection Payload: (select*from(select(sleep(15)))a) #bugbountytips #BugBounty #sqli

zapstiko's tweet image. Time-Base SQL Injection Payload: (select*from(select(sleep(15)))a) #bugbountytips #BugBounty #sqli
8
59
416
274
33K
NullSecurityX's profile picture. Infosec researcher • Bug bounties & security analysis. Collabs/ads: root@nullsecurityx.codes /
NullSecX
@NullSecurityX
Jun 20

🧠 WAF Bypass via JSON-Based SQLi 1️⃣ WAF blocks classic payloads in query params 2️⃣ App parses JSON body: {"user":"admin' OR 1=1--"} 3️⃣ WAF doesn’t inspect JSON deeply 4️⃣ Payload reaches backend → SQLi triggers 🎯 JSON input → stealth injection #bugbounty #wafbypass #sqli

NullSecurityX's tweet image. 🧠 WAF Bypass via JSON-Based SQLi 1️⃣ WAF blocks classic payloads in query params 2️⃣ App parses JSON body: {"user":"admin' OR 1=1--"} 3️⃣ WAF doesn’t inspect JSON deeply 4️⃣ Payload reaches backend → SQLi triggers 🎯 JSON input → stealth injection #bugbounty #wafbypass #sqli
1
39
273
144
14K
0x0SojalSec's profile picture. Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project AI-StrikeSec || 0ld Accounts Suspended @0xSojalSec ||
Md Ismail Šojal 🕷️
 @0x0SojalSec
Jan 19

If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli

0x0SojalSec's tweet image. If you find PHP 8.1.0-dev then try RCE & SQLi User-Agentt: zerodiumsleep(5); User-Agentt: zerodiumsystem('id'); #bugbounty #bugbountytips #rce #sqli
6
149
788
575
44K
RodoAssis's profile picture. That #XSS and #WAF #bypass guy. @BRuteLogic @KN0X55
Rodolfo Assis
 @RodoAssis
Jun 30, 2024

Do you want to easily #hack something but has not idea what to do? Start by using the following magic string in username and password fields! /1#\ Check the full reference below. #hack2learn rodoassis.medium.com/thinking-about… #CyberSecurity #WebHacking #SQLi

RodoAssis's tweet image. Do you want to easily #hack something but has not idea what to do? Start by using the following magic string in username and password fields! /1#\ Check the full reference below. #hack2learn rodoassis.medium.com/thinking-about… #CyberSecurity #WebHacking #SQLi
1
30
207
210
12K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Oct 2, 2024

🚨 I found the coolest #SQLi on a target! Surprisingly, the SQLi was in the "ignore cookies" button of the cookie banner. As I always say and do, don’t just look for SQLis in parameters. Check uncommon places like cookie banners, cookie accept buttons, etc. #BugBounty…

nav1n0x's tweet image. 🚨 I found the coolest #SQLi on a target! Surprisingly, the SQLi was in the "ignore cookies" button of the cookie banner. As I always say and do, don’t just look for SQLis in parameters. Check uncommon places like cookie banners, cookie accept buttons, etc. #BugBounty…
nav1n0x's tweet image. 🚨 I found the coolest #SQLi on a target! Surprisingly, the SQLi was in the "ignore cookies" button of the cookie banner. As I always say and do, don’t just look for SQLis in parameters. Check uncommon places like cookie banners, cookie accept buttons, etc. #BugBounty…
15
57
531
279
27K
nav1n0x's profile picture. Github: https://t.co/7MrKOcUFfO | 2x MVR @msftsecurity
N$
@nav1n0x
Feb 2, 2024

Do not forget to test 'Newsletter Signup' form for SQLi & stored XSS. This public bb target is on bc since 2022 & has different s/u forms for home page & internal pages, the internal one was vulnerable - probably not being maintained. #BugBounty #SQLi.

nav1n0x's tweet image. Do not forget to test 'Newsletter Signup' form for SQLi & stored XSS. This public bb target is on bc since 2022 & has different s/u forms for home page & internal pages, the internal one was vulnerable - probably not being maintained. #BugBounty #SQLi.
nav1n0x's tweet image. Do not forget to test 'Newsletter Signup' form for SQLi & stored XSS. This public bb target is on bc since 2022 & has different s/u forms for home page & internal pages, the internal one was vulnerable - probably not being maintained. #BugBounty #SQLi.
19
76
453
192
31K

Something went wrong.


Something went wrong.


United States Trends