Web Hacking How I extended Time-Based SQL Injection to RCE

[CyberGod]

In this article, I will talk about my report sent to Sony as part of a public program on the HackerOne website , as well as how I converted Blind Time-based SQL Injection into full-scale remote OS command execution.

I will cut out important details from the article such as domains, subdomains, command results, my IP address, server IP address, and others.

Exploration stage​

You must reply before you can see the hidden data contained here.

 

[_mrx]

In this article, I will talk about my report sent to Sony as part of a public program on the HackerOne website , as well as how I converted Blind Time-based SQL Injection into full-scale remote OS command execution.

I will cut out important details from the article such as domains, subdomains, command results, my IP address, server IP address, and others.

Exploration stage​

[Hidden content]

 

[zero hash]

amazinggg....

 

[mrkillerpro1]

lemmecheck

 

[blacknetx1]

appreciate