SQL Injection | Think like an attacker, defend like a guardian

2018

$Dark dossier-style cover with copper-orange fractured chain links and cracked digital interface layers, multiple attack surfaces splitting open across the CMS — symbolizing the chained exploitation of YXCMS injection points and file-operation flaws$

Security Research

Code Audit: YXCMS 1.4.6 Vulnerability Collection

A retrospective audit of YXCMS 1.4.6 covering five vulnerability classes: stored XSS in the guestbook via array-based regex bypass, chained with CSRF to drop a PHP webshell, plus arbitrary file deletion, backend file write, and numeric SQL injection.

2018-02-08 8 min #Web Security

2017

$Copper-orange fractured chain links and code fissures over a near-black teal-blue background, symbolizing the MySQL blind injection exploit chain that bypasses filters via hex() double-encoding and character-set comparison quirks$

Security Research

Thoughts from a CTF Challenge: A Few MySQL Quirks

A walk-through of a MySQL blind SQL injection CTF challenge, focusing on four often-overlooked MySQL behaviors: case-insensitive string comparison, numeric string equality, hex() returning a string, and char() returning a BINARY string. Covers using double hex() encoding to bypass filters and achieve case-sensitive blind injection, with a Python 3 automation script.

2017-05-19 8 min #Web Security