ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
PPPriti Pawarinportswiggerlabs.hashnode.dev·Aug 4 · 23 min readPortSwigger: Broke 10 things this weekI'm a third-year B.Tech CSIT student, and this week I started working through PortSwigger's Web Security Academy to explore offensive security hands-on. I'm documenting each lab here — the vulnerabili00
Ddamienanon14ininfinitedomain.hashnode.dev·Jul 26 · 4 min readMy First SQL InjectionI've been building up to this one for a while. Out of everything I've worked through in the lab so far, SQL injection is the attack that actually made cybersecurity feel real to me, not because it's f00
TVThuriaanandh Vinthuriaanandh-sec.hashnode.dev·Jun 14 · 19 min readSQL Injection Labs (Portswigger)If you want a second reference alongside this, Rana Khalil's Web Security Academy series on GitHub covers these too and is worth a look once you've had your own "wait, why is this query failing" momen00
AAhmedinfirst-projects-blog.hashnode.dev·Jun 13 · 4 min readSQLi DemonstrationIntroduction A great way to get a full understanding of any particular cybersecurity topic is actually to implement it. Rather than learning only theoretically how SQL Injection (SQLi) works, I've bui00
AKAniket Kumarinblog.crypticani.dev·May 10 · 2 min readIs SQL Injection Still Relevant in 2026?While learning about SQL Injection recently, I had a genuine question in mind: If modern applications use ORMs everywhere, why should we still care about SQL Injection? At first glance, it feels out11J
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Apr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQL00
ASaviral srivastavainaviraxroot.hashnode.dev·Mar 16 · 13 min readI Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSch00
JJebitokinsharonjebitok.com·Mar 14 · 7 min readSQL Injection - CWE 89 (YesWeHack Dojo)Introduction SQL injection has been on the OWASP Top 10 for years — not because developers don't know about it, but because unsanitized user input keeps finding its way into database queries. CWE-89 (10
MKMahrab Khanintechgreek.hashnode.dev·Jan 22 · 4 min readNetCom Learning: Why Advanced SQL Courses Training is the Keystone of Business IntelligenceIn the era of "Big Data," tools come and go. Hadoop had its moment, NoSQL has its specific use cases, and visualization tools like Tableau rely on clean data feeds. Yet, through decades of technological shifts, SQL (Structured Query Language) remains...00