Видео

many thanks

I'm happy the video was helpful

Right, boolean and time-based sqli's can be a pain when trying to exploit them manually, especially in large/complex database structures. always look into automating the exploitation process or using tools like sqlmap. understanding of the manual exploitation process is useful when creating automation scripts or troubleshooting tools that are not giving the desired results. In response to the reasoning for using '!=' operator, this is often used to eliminate information we've already discovered during the brute-force process. for instance, if you are enumeration column names for the same database and table, using '!=' will ensure you don't enumerate same column name more than once

yes will certainly be a bug. great finding though

I also thought it was a bug, but actually "_" is a special character for "find". you need to escape it (fin "\_").

​@@pierluigirizza2140 good point. In SQL queries, the underscore is a special character used as a single-character wildcard. For example, the pattern "_a_" would match any three-character string where the second character is "a"

glad you liked the walkthrough. the plan is to make more of these when i have the time

I will need more context about your issue to be able to advise. let me know how burpsuite is behaving when you try to intercept traffic and whether you've configured proxy settings in your web browser to work with burp

glad my video helped 😊

Yh good point. I intentionally didn't scroll down along the questions so I could solve the challenge my own way. By doing so, I get to make mistakes, troubleshoot, and resolve issues as I go. I appreciate you feedback

@@cybermasus When you put it like that, I sort of take back my comment. Thank you for your reply. Best of luck in your RUclips Journey!

yeah right, i try to go for techniques that are easy to understand

I'm glad my video was helpful 😊

i typed so many commands. let me know what specific command then i can help with answer

it’s fun navigating the linux file system from the command line. I'm sure you will have a hang of it with practice 😅

@sathsarabandara660 I'm happy you like the video

Hey. I' m a beginner of this and Could you give me some start up tips and list of things that I should be focused on bug bounty please?

@@sathsarabandara660 try out some web based exercises on TryHackMe, portswigger labs, and HackTheBox. Once you level up your skills, register on bug bounty platforms like HackerOne and Bugcrowd to get started

@@cybermasus Thank you so much for your help.