THM: SQHell
Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.
Union-Based SQL Injection
HTB: Jarvis
Linux machine chaining manual union-based SQL injection into a phpMyAdmin web shell, a Python command injection, and SUID systemctl abuse for root.