https://mrbeetrootpwn.com/tags/sqlmap/Recent content in sqlmap on CyberSec WriteupsHugoen-usSun, 09 Aug 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/tryhackme/thm-sqhell/Sun, 09 Aug 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/tryhackme/thm-sqhell/Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-monitored/Wed, 18 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-monitored/Linux machine leaking credentials over SNMP, exploiting a Nagios XI SQL injection and legacy admin-creation API, then abusing a sudo script’s unsanitised symlink target for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pandora/Sat, 14 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-pandora/Linux machine leaking SSH credentials over SNMP, exploiting a Pandora FMS SQL injection to hijack a session, chaining an event feature into command execution, and hijacking a SUID binary’s relative tar call for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-usage/Mon, 01 Dec 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-usage/Linux machine exploiting a boolean-blind SQL injection in a password reset form to recover credentials, an outdated Laravel admin panel for a file upload RCE, and a 7-Zip wildcard injection for root.