Test SQL injection exploits

Exploit SQL injection in login and data APIs

Bug bounty exploitation of SQL injection on login and export endpoints

• · target_endpoint (login, search, export)
• · sqli_payload (union, boolean blind, time blind)

• · data_exfiltrated (user table, admin accounts)
• · rce_via_xp_cmdshell (if SQL Server)

• · HTTP client (curl, Burp)
• · sqlmap or manual payloads
• · SQLi cheat sheets

SQL injection endpoint confirmed, database type identified, permission to test

• · WAF blocks common payloads
• · Blind SQLi requires OOB (out-of-band) channel
• · Rate limiting blocks fuzz attempts
• · Prepared statements silently present

• · UNION-based, boolean blind, time blind, and error-based payloads documented
• · Example data exfiltration queries
• · Covers both MySQL and SQL Server variants