Sql Injection via the user-agent, how can this happen? well here what we need to know first is that the sql injection query that we normally use like order by 99 — - is useless we can no longer use, and here they have blocked important characters for like (‘ ’, “ ”, /, \,)etc.
ok ... most applications usually record our user-agent and through user-agents we can do sql injection.
medium : https://medium.com/@hninja049
Download
0 formats
No download links available.
[bug-bounty] SQL injection via user-agent | NatokHD