Bugbounty

Bug Bounty: Bypassing a crappy WAF to exploit a blind SQL injection

Some time ago I found a blind SQL injection on a bug bounty target. The web page was built with ASP.NET and had a big attack surface. After crawling …