THM: SQHell

Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.

August 9, 2026 · 8 min