We’re used to seeing SQL Injection in query string parameters (like ?id=1) or in forms.  But the reality is bigger — any input sent by the…

An inside look at the grind, the eureka moments, and the final flag that made it all worth it

Introduction

Contrabando is a TryHackMe, web-exploitation CTF with a focus on proxy rewrites and request smuggling chain to privilege escalation. It’s…

Hi all! Today, we’ll be solving the first SSRF lab from the PortSwigger Web Security Academy. Let’s look at the lab description and get…

Uh oh, looks like some older D-Link routers have a serious problem. We’re talking about remote code execution (RCE), which means attackers…

At xss0r, we’ve always believed in giving back to the security community. When we promised a 10-day FREE GOLDEN PLAN giveaway, we meant it…

How other Hunters Find Criticals in Hidden Parameters.

🔎 Overview

🔎 Overview

🔎 Overview

🧐 What’s the Lab About?

This lab contains a SQL injection vulnerability in the login function. To solve the lab, perform a SQL injection attack that logs in to the…

This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, the application carries…

Ruby on Rails, often lauded for its developer-friendliness and convention-over-configuration philosophy, provides a robust foundation for…

Uncovering vulnerabilities and exploiting them: a deep dive into the journey from reconnaissance to a successful SQL injection.

🛡️ Introduction

During a recent penetration test, I discovered an interesting SQL injection vulnerability in a web application’s city search functionality…

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

It always amazes me how one small character can change everything in code.

Have you ever blasted a target with 30+ SQLi payloads… and every single one failed? 😩  Welcome to 2025, where WAFs are smarter, filters…