Tag: SQL Injection | Youssef Kessentini

PwnSec CTF 2026

Created2026-09-16|CTF Writeups|SQL Injection•CTF•Web•Python•Blind SQLi•Pickle•Deserialization•PHP

PwnSec CTF 26: two easy web solves, a boolean blind SQLi built on a PHP type-confusion crash, and a pickle sandbox escape using OBJ instead of REDUCE

CCTV

Created2026-07-11|HTB Machines|HackTheBox•Linux•SQL Injection•CVE-2024-51482•CVE-2025-60787•ZoneMinder•motionEye•Command Injection•Default Creds•Credential Cracking

HTB Easy Linux machine — default creds into ZoneMinder, time-based SQL injection (CVE-2024-51482) to dump password hashes, and root via motionEye command injection (CVE-2025-60787)