SQL Injection | Classroom

TryHackMe Source Code Review PHP: XXE to deserialization RCE

PHP

Source Code Review PHP: XXE to deserialization RCE

TryHackMe Web Frameworks .NET: ViewState RCE to Json.NET deser chain

ASP.NET

Web Frameworks .NET: ViewState RCE to Json.NET deser chain

TryHackMe Web Frameworks Python: Django leak to Flask session forgery

Django

Web Frameworks Python: Django leak to Flask session forgery

TryHackMe Web Frameworks Java: Spring actuator to deserialization RCE

Spring Boot

Web Frameworks Java: Spring actuator to deserialization RCE

TryHackMe Web Frameworks Code Review: source-to-sink Flask audit

code review

Web Frameworks Code Review: source-to-sink Flask audit

TryHackMe Whats Your Name: XSS, CSRF and SQLi chain

XSS

Whats Your Name: XSS, CSRF and SQLi chain

TryHackMe Injectics: SQLi Filter Bypass to Twig RCE

Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

TryHackMe ORM Injection: whereRaw and ORDER BY Injection

Web Application Pentesting

ORM Injection: whereRaw and ORDER BY Injection

TryHackMe Advanced SQL Injection: Five Evasion Techniques

Web Application Pentesting

Advanced SQL Injection: Five Evasion Techniques

TryHackMe Operation Promotion: SQLi, Command Injection, sudo find

Offensive Security

Operation Promotion: SQLi, Command Injection, sudo find