writeups.xyz writeups.xyz / Blind SQL Injection

Title Vulnerabilities Programs Authors
Blind SQL injection with a little WAF
Utilizing Historical URLs of an Organization to successfully execute SQL queries — Blind SQLi
Multiple authenticated blind SQL Injections in Sage XRT Business Exchange application
Blind SQL Injection on Delete Request
Utilizing Lockdown: Blind Sqli leads to Account Takeover & Data Extraction
Bug Bounty: Bypassing a crappy WAF to exploit a blind SQL injection
Please email me your password
Time-based Blind SQLi on news.starbucks.com
Blind SQL Inejction [Hootsuite]