THM: SQHell
Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.
Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.
Web application challenge chaining OTP brute forcing, a rate-limit bypass, JWT key manipulation, and remote command execution.