Blog

Writeups, research & experiments

CTF walkthroughs, Hack The Box and TryHackMe labs, and security research.

SQL Injection in WHERE Clause: How to Retrieve Hidden Data (PortSwigger Lab Walkthrough)

A beginner-friendly, step-by-step PortSwigger lab walkthrough: exploiting a SQL injection flaw in a product category filter to retrieve hidden, unreleased products.

Vulnhub

Hackable II - Vulnhub

Just download and double-click the .ova file to load it in your VirtualBox. Start the machine and wait until this screen appears: You can scan the network by…