HHareeshwar N K·Oct 30When the Database Talks Back: Blind SQLi Data Exfiltration Over DNSA PortSwigger Practitioner lab where a quoted string literal blocked my first payload, and rebuilding the concatenation at SQL level turned the admin password into a DNS label.6 min read·hareeshwarnk.hashnode.dev
4404 Founders·Oct 29Oracle EBS CVE-2026-101767: Unauthenticated SQL Injection That Chains to RCECVE-2026-101767 chains SQL injection through Oracle EBS TCF servlet to OS command execution. Probing started one day after the October 2026 CPU patch.5 min read·404-founders.com
YYogeshwar Peela·Oct 12TryHackMe: PlottedTMS WriteupExplore the TryHackMe Plotted room walkthrough covering SQL injection, PHP web shell upload,cron-based privilege escalation, and doas misconfiguration8 min read·exploitnotes.hashnode.dev
CCiphemic academia·Oct 13SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 FineA worm hit 1 million users in 20 hours. A breach drew a record fine. Three web attacks, and who each one fools.15 min read·ciphemicacademia.hashnode.dev
YYogeshwar Peela·Oct 12TryHackMe: Gallery WriteupExplore the TryHackMe Gallery walkthrough covering SQL injection, PHP webshell upload, leaked credentials, sudo misconfiguration, and nano privilege.7 min read·exploitnotes.hashnode.dev
TTrust Boundary·Oct 12AI agents broke into 27 online shops for $25 a companyAI agents broke into 27 online shops for $25 a company12 min read·trustboundarystudio.hashnode.dev
IIliya·Sep 29Intigriti September 2026 Challenge, Critter GalleryA blank 200 error page, a one-column UNION, and a base64 parameter that hid it all.8 min read·blog.iliyadindar.site
4404 Founders·Sep 28Roundcube CVE-2026-48842: Pre-Auth SQL Injection Exploitation ReportedThe optional virtuser_query plugin is affected. Roundcube fixed the flaw in 1.6.16 and 1.7.1.2 min read·404-founders.com
YYogeshwar Peela·Sep 10TryHackMe - Olympus WriteupOlympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell.10 min read·exploitnotes.hashnode.dev
ZZeroProtocol·Aug 13Common Web Application TechnologiesLearn how Java, ASP.NET, PHP, Rails, SQL, XML, and SOAP work in web applications and where security weaknesses can appear during web pentesting.7 min read·webpentestingdeepdive.hashnode.dev1
