SSangiiSep 29 · 7 min readHow I solved Intigriti's September 2026 challenge: SQLi hiding behind base64Intigriti monthly challenge 0926 — "Critter Gallery" by @khanhdlq. Solved Sept 21, 2026, ~6h15m after launch. TL;DR The challenge hid a classic UNION-based SQL injection behind a base64-encoded paramsangiihacks.hashnode.dev
AAlvin YangSep 22 · 7 min readSQL Injection: Attacks, Risks, and Practical DefenseSQL injection (SQLi) remains a common web application vulnerability because it targets the way applications interact with databases. The problem occurs when untrusted input is incorporated into an SQLalvinyang.hashnode.dev
ZZeroProtocolAug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 1webpentestingdeepdive.hashnode.dev
PPriti PawarAug 4 · 23 min readPortSwigger: Broke 10 things this weekI'm a third-year B.Tech CSIT student, and this week I started working through PortSwigger's Web Security Academy to explore offensive security hands-on. I'm documenting each lab here — the vulnerabiliportswiggerlabs.hashnode.dev
Ddamienanon14Jul 26 · 4 min readMy First SQL InjectionI've been building up to this one for a while. Out of everything I've worked through in the lab so far, SQL injection is the attack that actually made cybersecurity feel real to me, not because it's finfinitedomain.hashnode.dev
TThuriaanandh VJun 14 · 19 min readSQL Injection Labs (Portswigger)If you want a second reference alongside this, Rana Khalil's Web Security Academy series on GitHub covers these too and is worth a look once you've had your own "wait, why is this query failing" momenthuriaanandh-sec.hashnode.dev
AAhmedJun 13 · 4 min readSQLi DemonstrationIntroduction A great way to get a full understanding of any particular cybersecurity topic is actually to implement it. Rather than learning only theoretically how SQL Injection (SQLi) works, I've buifirst-projects-blog.hashnode.dev
AAniket KumarMay 10 · 2 min readIs SQL Injection Still Relevant in 2026?While learning about SQL Injection recently, I had a genuine question in mind: If modern applications use ORMs everywhere, why should we still care about SQL Injection? At first glance, it feels out11Jblog.crypticani.dev
WWiktoria Blomgren StrandbergApr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQLpentesting-dvwa.hashnode.dev
Aaviral srivastavaMar 16 · 13 min readI Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSchaviraxroot.hashnode.dev
