https://blog.hks.ec/tags/sqli/ Recent content in sqli on Hakisec Hugo -- gohugo.io en-US Thu, 21 Sep 2023 00:00:00 +0000 https://blog.hks.ec/posts/ip-spoofing-ftw/ Thu, 21 Sep 2023 00:00:00 +0000 https://blog.hks.ec/posts/ip-spoofing-ftw/ Starting from the bottom Today, i will talk about a really huge company with millions of accounts and millions peoples going there every day ! At the beginning, the website was looking secure, the most annoying part was that they were using Datadome. On my FFUF, i often use my own “config” (Exotics User-Agent, special headers, …) and, when i launched it, i discovered that it wasn’t blocked by Datadome and, also, that it have access to extra files i didn’t have access to (403 Forbidden).