Back to directory

WRITEUP #1561

SQL Injection: Utilizing XML Functions in Oracle and PostgreSQL to bypass WAFs

SQL InjectionWAF bypass

by@Zombiehelp54(Mahmoud Gamal)

Program

-

Published

Feb 13, 2023

Added to HackDex

Feb 28, 2023

Read Full Writeuphttps://mahmoudsec.blogspot.com/2023/02/sql-injection-utilizing-xml-functions.html

▸ RELATED WRITEUPS

Directory Traversal, SQL Injection and Server-Side Request Forgery

SQL InjectionPath traversal

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

SQL InjectionReverse engineering

Bypassing airport security via SQL injection

World of SELECT-only PostgreSQL Injections: (Ab)using the filesystem

Listen to the whispers: web timing attacks that actually work

SSRFTiming attack

Built with ❤️ by Shubham Rawat