IIliyainblog.iliyadindar.site·4h ago · 8 min readIntigriti September 2026 Challenge, Critter GalleryVulnerability: Unauthenticated SQL injection (MySQL 8.0.46) in the base64-encoded pic parameter of /challenge.php, exploited with a single-column UNION SELECT to read the secret_vault table. TL;DR /c00
IIliyainblog.iliyadindar.site·May 22 · 7 min readDOOM — Chaining CSPT, Open Redirect, and XSSA walkthrough of the DOOM box. Three "small" bugs that mean nothing on their own, but composed together hand you a one-click XSS that runs on the victim's origin with their session in localStorage. T00
IIliyainblog.iliyadindar.site·Apr 3 · 4 min readUNION SELECT Unlocked: A Beginner’s Guide to UNION-Based SQLiTable of Contents 01 - Vulnerability Discovery 02 - Injection Detection 03 - Column Count Enumeration 04 - Reflected Column Discovery 05 - Database Enumeration 06 - Flag Extraction 01 - Vulne00
