Write-up4 min
From a blind SQL injection to a shell, one bit at a time
Personal lab
A lab walkthrough: finding a boolean-blind injection with no visible output, turning it into data exfiltration, then into file write, then into code execution.
- Write-ups
- Web Security
- SQL Injection
Write-up3 min
The JWT that trusted its own header
Personal lab
A lab write-up on an authentication bypass through JWT algorithm confusion — the classic 'alg: none' and its slightly less obvious RS256-to-HS256 cousin.
- Write-ups
- Web Security
- Authentication