SQL Injection Vulnerability | FirstBlood v2 | Bug Bounty Service

[@amoh96]

i like how u explain things Keep it

[@martinvoelk]

Thanks, will do!

[@oo7posam581]

Believe me this type of things don't exist in Paid Programs... Mostly you will find
Blind Sql and sometimes that too after intercepting request you may find Error based sql

[@martinvoelk]

IDORs, Access Control, CSRF, Info Disclosure, OAuth and Business Logic are the ones I find most in paid programs

[@RolexValdez-t5p]

Me also, i'd tried many time but non of it works.

[@martinvoelk]

Most SQL injections are blind / OOB in real world. I find them often in APIs. Quite a few in GraphQL recently.