Posts

Showing posts from April, 2021
Image
Story of SQL Injections on One program on Bugcrowd: Hello This is Ahmed Ismail , Today I'm gonna share my first blog as it should be published about 10 month ago , but sorry I'm lazy :D . so I'm gonna share the story about SQL Injection on a private program on Bugcrowd so it will be fun as it was different dbms I have deal with as Informix and IBM DB2 so let's get started. Blind SQL Injection : Is a type of SQL Injection attack that asks the database true or false questions and determines the answer based on the applications response. >This attack is often used when the web application is configured to show generic error messages, but has not mitigated the code that is vulnerable to SQL injection. so let's begin with the Informix DB after enumerating subdomains of the Target , let's name it "REDACTED" , I reach an endpoint after gathering subdomains and spidering it and I got an endpoint that it may be a potential SQL Injection on it , and throw ran...