9447 CTF Recon 1 & 2 Writeups
Last weekend I was lucky enough to play with the talented Montreal-based capture-the-flag (CTF) team DCIETS in the 9447 online CTF event [http://9447.plumbing]. For »
Blind Error-based SQL Injection with NULLIF()
The other day I found an interesting way to use error-/boolean-based SQL injection, blindly, to exfiltrate database artifacts. What do I mean by that? Well, »