The following is my documentation on Portswigger’s Academy Labs. Goal: Log into the Admin user’s account with password credentials retrieved from a hidden table by exploiting SQL injection. I will be using Burpsuite (in this case the community edition) to view proxy history and automate our payloads. To begin let us take a look at […]