SSangiiinsangiihacks.hashnode.dev·Sep 29 · 7 min readHow I solved Intigriti's September 2026 challenge: SQLi hiding behind base64Intigriti monthly challenge 0926 — "Critter Gallery" by @khanhdlq. Solved Sept 21, 2026, ~6h15m after launch. TL;DR The challenge hid a classic UNION-based SQL injection behind a base64-encoded param00
AYAlvin Yanginalvinyang.hashnode.dev·Sep 22 · 7 min readSQL Injection: Attacks, Risks, and Practical DefenseSQL injection (SQLi) remains a common web application vulnerability because it targets the way applications interact with databases. The problem occurs when untrusted input is incorporated into an SQL00
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
PPPriti Pawarinportswiggerlabs.hashnode.dev·Aug 4 · 23 min readPortSwigger: Broke 10 things this weekI'm a third-year B.Tech CSIT student, and this week I started working through PortSwigger's Web Security Academy to explore offensive security hands-on. I'm documenting each lab here — the vulnerabili00
Ddamienanon14ininfinitedomain.hashnode.dev·Jul 26 · 4 min readMy First SQL InjectionI've been building up to this one for a while. Out of everything I've worked through in the lab so far, SQL injection is the attack that actually made cybersecurity feel real to me, not because it's f00
TVThuriaanandh Vinthuriaanandh-sec.hashnode.dev·Jun 14 · 19 min readSQL Injection Labs (Portswigger)If you want a second reference alongside this, Rana Khalil's Web Security Academy series on GitHub covers these too and is worth a look once you've had your own "wait, why is this query failing" momen00
AAhmedinfirst-projects-blog.hashnode.dev·Jun 13 · 4 min readSQLi DemonstrationIntroduction A great way to get a full understanding of any particular cybersecurity topic is actually to implement it. Rather than learning only theoretically how SQL Injection (SQLi) works, I've bui00
AKAniket Kumarinblog.crypticani.dev·May 10 · 2 min readIs SQL Injection Still Relevant in 2026?While learning about SQL Injection recently, I had a genuine question in mind: If modern applications use ORMs everywhere, why should we still care about SQL Injection? At first glance, it feels out11J
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Apr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQL00
ASaviral srivastavainaviraxroot.hashnode.dev·Mar 16 · 13 min readI Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSch00
