Mastodawn

Marduk_James

May 30

My methodology for finding subdomains. I hope it helps!

https://medium.com/@marduk.i.am/recon-methodology-subdomain-enumeration-0e0493001a03

#bugbountytips #bugbounty #CyberSecurity #resonnaissance #EthicalHacking

Recon Methodology: Subdomain Enumeration - Marduk I Am - Medium

Hello everyone. Welcome to my first venture beyond the usual lab write-ups. I hope you find this useful. This methodology is what works for me right now — it might not be a perfect fit for you, and…

Medium

Marduk_James

May 25

Latest lab write-up. Came out a bit long but very informative.

https://medium.com/@marduk.i.am/blind-sql-injection-with-conditional-responses-46ee90b5f2c0

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #Portswigger

Blind SQL Injection with Conditional Responses - Marduk I Am - Medium

This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted cookie. The results of the…

Medium

Marduk_James

Mar 16

It's been a while but here is another SQLi lab. Enjoy!

https://medium.com/@marduk.i.am/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-d6c6d91be74d

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Nov 13, 2024

Last in a series of 3 labs. Enjoy

https://medium.com/@marduk.i.am/sql-injection-union-attack-retrieving-data-from-other-tables-38f471813c57

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection UNION Attack, Retrieving Data from Other Tables

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response, so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Nov 8, 2024

Second in a series of 3 labs.

https://medium.com/@marduk.i.am/sql-injection-union-attack-finding-a-column-containing-text-ee28ff48eb30

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection UNION Attack, Finding a Column Containing Text

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response, so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Nov 6, 2024

First in a series of 3 labs.

https://medium.com/@marduk.i.am/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-a740b76989fe

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection UNION Attack, Determining the Number of Columns Returned by the Query

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response, so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Oct 25, 2024

Latest SQLi lab write-up. Hope you find it useful!

https://medium.com/@marduk.i.am/sql-injection-attack-listing-the-database-contents-on-oracle-3be23e33a43d

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection Attack, Listing the Database Contents on Oracle

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Sep 9, 2024

Latest lab write-up. Hope it's useful!

https://medium.com/@marduk.i.am/sql-injection-attack-listing-the-database-contents-on-non-oracle-databases-825485566585

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection Attack, Listing the Database Contents on Non-Oracle Databases

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application’s response so you can use a UNION attack to retrieve data…

Medium

Marduk_James

Aug 4, 2024

I just published SQL Injection Attack, Querying the Database Type and Version on MySQL and Microsoft https://link.medium.com/hHxIw42EMLb

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

Marduk_James

Aug 1, 2024

It's been a while but here is the latest write-up!

https://medium.com/@marduk.i.am/sql-injection-attack-querying-the-database-type-and-version-on-oracle-fcbd7a064b89

#BugBounty #bugbountytips #SQL #SQLI #injection #informationsecurity #PortswiggerLabs

SQL Injection Attack, Querying the Database Type and Version on Oracle

This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an injected query. Hint: On Oracle databases, every SELECT…

Medium