Back to directory
WRITEUP #722

Behind the Query: Unearthing NTLM Hashes with SQL Injection

SQL InjectionNTLM
by@chaskar_shubham(Shubham Chaskar)
Program
-
Published
Oct 22, 2023
Added to HackDex
Feb 1, 2024
Read Full Writeuphttps://shubhamchaskar.com/sqli-to-ntlm/
▸ RELATED WRITEUPS
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670
SQL InjectionReverse engineering
Bypassing airport security via SQL injection
SQL Injection
NTLM Credential Theft in Python Windows Applications
SSRFNTLMv2 hash disclosure
World of SELECT-only PostgreSQL Injections: (Ab)using the filesystem
SQL Injection

Built with ❤️ by Shubham Rawat