Technique CWE-89

SQL Injection

Manipulating SQL queries via unsanitised input — error-based, UNION-based, blind boolean, and time-based variants.

1 post

writeup 26 May 2026

Lab: Example Machine

A walkthrough of the Example lab — SQLi to foothold, then SUID abuse for root.

linuxweb sqliprivesc