⤷ Title: Blind SQL Injection: Conditional Responses
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 16 Nov 2025 07:32:23 GMT
════════════════════════
⌗ Tags: #sql #burp #cybersecurity #sql_injection #burpsuite
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 16 Nov 2025 07:32:23 GMT
════════════════════════
⌗ Tags: #sql #burp #cybersecurity #sql_injection #burpsuite
Medium
Blind SQL Injection: Conditional Responses🎯
Blind SQL injection exploiting Welcome back responses to extract the administrator’s password using boolean conditions and substring-based…
⤷ Title: SQL Injection: Retrieving Data From Other Tables (UNION-Based SQLi)
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 09:23:25 GMT
════════════════════════
⌗ Tags: #burp #sql_injection #sql #burpsuite #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 09:23:25 GMT
════════════════════════
⌗ Tags: #burp #sql_injection #sql #burpsuite #cybersecurity
Medium
🎯 SQL Injection: Retrieving Data From Other Tables (UNION-Based SQLi)
UNION-based SQLi to enumerate tables, dump usernames/passwords from the users table, and log in as the administrator.
⤷ Title: SQL Injection: Retrieving Multiple Values in a Single Column
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:25:55 GMT
════════════════════════
⌗ Tags: #sql_injection #sql #burp #burpsuite #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:25:55 GMT
════════════════════════
⌗ Tags: #sql_injection #sql #burp #burpsuite #cybersecurity
Medium
SQL Injection: Retrieving Multiple Values in a Single Column💉
UNION-based SQLi PoC where we enumerate tables, extract usernames and passwords from the users table using string concatenation, and log in…
⤷ Title: SQL Injection: Finding a Column That Accepts String Data
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:15:15 GMT
════════════════════════
⌗ Tags: #burpsuite #sql_injection #sql #cybersecurity #burp
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 09:15:15 GMT
════════════════════════
⌗ Tags: #burpsuite #sql_injection #sql #cybersecurity #burp
Medium
SQL Injection: Finding a Column That Accepts String Data
Finding which column accepts string data using a UNION-based SQL injection on the product category filter to display the lab’s provided…
⤷ Title: SQL Injection: Determining the Number of Columns Returned by the Query
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:33:49 GMT
════════════════════════
⌗ Tags: #sql #burp #burpsuite #sql_injection #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:33:49 GMT
════════════════════════
⌗ Tags: #sql #burp #burpsuite #sql_injection #cybersecurity
Medium
SQL Injection: Determining the Number of Columns Returned by the Query 💉
UNION-based SQLi to identify the exact number of columns returned by the application’s SQL query.
⤷ Title: SQL Injection: Listing the Database Contents on Oracle
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:29:08 GMT
════════════════════════
⌗ Tags: #sql #cybersecurity #sql_injection #burpsuite #burp
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 11:29:08 GMT
════════════════════════
⌗ Tags: #sql #cybersecurity #sql_injection #burpsuite #burp
Medium
SQL Injection: Listing the Database Contents on Oracle💉
A clean Oracle-based UNION SQLi walkthrough where I enumerate tables, extract user credentials, and log in as administrator to solve the…
⤷ Title: Reflected Cross-Site Scripting: HTML Context (Nothing Encoded)
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 08:52:29 GMT
════════════════════════
⌗ Tags: #burp #reflected_xss #xs #cybersecurity #burpsuite
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 08:52:29 GMT
════════════════════════
⌗ Tags: #burp #reflected_xss #xs #cybersecurity #burpsuite
Medium
🎯 Reflected Cross-Site Scripting: HTML Context (Nothing Encoded)
Simple reflected XSS vulnerability where unencoded HTML context allows direct JavaScript execution via a <script> payload.
⤷ Title: Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
════════════════════════
𐀪 Author: MaMad
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 12:26:04 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty_tips #bug_bounty #burp
════════════════════════
𐀪 Author: MaMad
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 12:26:04 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty_tips #bug_bounty #burp
Medium
Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide)
When testing applications with Burp Suite, it’s easy to get overwhelmed by noisy traffic: analytics scripts, ads, assets, and external APIs…
⤷ Title: DOM XSS in innerHTML Sink (location.search → innerHTML)
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:19:25 GMT
════════════════════════
⌗ Tags: #cross_site_scripting #burp #burpsuite #cybersecurity #xs
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:19:25 GMT
════════════════════════
⌗ Tags: #cross_site_scripting #burp #burpsuite #cybersecurity #xs
Medium
DOM XSS in innerHTML Sink (location.search → innerHTML) 🎯
DOM-based XSS flaw where location.search is injected into the page via innerHTML, letting us execute arbitrary JavaScript.
⤷ Title: Exploiting an API endpoint using documentation — A Portswigger Lab
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 11:44:03 GMT
════════════════════════
⌗ Tags: #api_security #appsec #api_documentation #burp #burpsuite
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 11:44:03 GMT
════════════════════════
⌗ Tags: #api_security #appsec #api_documentation #burp #burpsuite
Medium
Exploiting an API endpoint using documentation — A Portswigger Lab
Did you know?