0xWalid — Lab Notes https://0xwalid.github.io/writeups/ Security writeups, labs and AI security research by Waleed (0xWalid). en SSRF Field Guide — Breaking Trust Between Servers https://0xwalid.github.io/writeups/index.html?p=ssrf-series-portswigger ssrf-series-portswigger Fri, 14 Aug 2026 12:00:00 GMT Demonstrates I can spot and exploit server-side request forgery across every defense tier — from naive local targets to hardened whitelist filters — with clean documentation throughout. The Full SQL Injection Spectrum — 18 PortSwigger Labs https://0xwalid.github.io/writeups/index.html?p=sqli-series-portswigger sqli-series-portswigger Sat, 01 Aug 2026 12:00:00 GMT Proves end-to-end command of SQL injection — from simple auth bypasses to blind out-of-band data exfiltration — solved and documented lab by lab on the industry-standard platform. Talking an AI Into Trouble — Prompt Injection Lab https://0xwalid.github.io/writeups/index.html?p=prompt-injection-lab prompt-injection-lab Wed, 22 Jul 2026 12:00:00 GMT Demonstrates original security research: I built a deliberately vulnerable AI assistant, then broke it four different ways to show why LLM apps need threat models too. SSRF with whitelist based input filter https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-07 ps-ssrf-07 Tue, 20 Jan 2026 12:00:00 GMT Server-Side Request Forgery (SSRF) — solved and documented end to end. Blind SSRF with Shellshock exploitation https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-06 ps-ssrf-06 Fri, 02 Jan 2026 12:00:00 GMT blind Server-Side Request Forgery (SSRF) — solved and documented end to end. Blind SSRF with out of band detection https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-03 ps-ssrf-03 Thu, 01 Jan 2026 12:00:00 GMT blind Server-Side Request Forgery (SSRF) — solved and documented end to end. SSRF with blacklist based input filter https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-04 ps-ssrf-04 Thu, 01 Jan 2026 12:00:00 GMT Server-Side Request Forgery (SSRF) — solved and documented end to end. Initial Testing & Vulnerability Identification https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-05 ps-ssrf-05 Thu, 01 Jan 2026 12:00:00 GMT Exploit a Server‑Side Request Forgery (SSRF) vulnerability by abusing an open redirection flaw in the *Next product* feature to access an internal adm… Basic SSRF against another back end system https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-02 ps-ssrf-02 Mon, 29 Dec 2025 12:00:00 GMT Server-Side Request Forgery (SSRF) — solved and documented end to end. Basic SSRF against the local server https://0xwalid.github.io/writeups/index.html?p=ps-ssrf-01 ps-ssrf-01 Sun, 28 Dec 2025 12:00:00 GMT Server-Side Request Forgery (SSRF) — solved and documented end to end. Lab: Blind SQL injection with time delays https://0xwalid.github.io/writeups/index.html?p=ps-sqli-14 ps-sqli-14 Tue, 23 Dec 2025 12:00:00 GMT blind SQL injection vulnerability using time delays — solved and documented end to end. Blind SQL injection with time delays and information retrieval https://0xwalid.github.io/writeups/index.html?p=ps-sqli-15 ps-sqli-15 Tue, 23 Dec 2025 12:00:00 GMT blind SQL injection vulnerability using time delays — solved and documented end to end. Blind SQL injection with out of band interaction https://0xwalid.github.io/writeups/index.html?p=ps-sqli-16 ps-sqli-16 Tue, 23 Dec 2025 12:00:00 GMT blind SQL injection vulnerability — solved and documented end to end. Blind SQL injection with out of band data exfiltration https://0xwalid.github.io/writeups/index.html?p=ps-sqli-17 ps-sqli-17 Tue, 23 Dec 2025 12:00:00 GMT blind SQL injection vulnerability — solved and documented end to end. SQL injection with filter bypass via XML encoding https://0xwalid.github.io/writeups/index.html?p=ps-sqli-18 ps-sqli-18 Tue, 23 Dec 2025 12:00:00 GMT SQL injection vulnerability in an XML-based POST request — solved and documented end to end. Blind SQL injection with conditional errors https://0xwalid.github.io/writeups/index.html?p=ps-sqli-12 ps-sqli-12 Sat, 20 Dec 2025 12:00:00 GMT blind SQL injection vulnerability — solved and documented end to end. Visible error based SQL injection https://0xwalid.github.io/writeups/index.html?p=ps-sqli-13 ps-sqli-13 Sat, 20 Dec 2025 12:00:00 GMT visible error-based SQL injection — solved and documented end to end. SQL injection UNION attack, retrieving multiple values in a single column https://0xwalid.github.io/writeups/index.html?p=ps-sqli-10 ps-sqli-10 Tue, 16 Dec 2025 12:00:00 GMT - The vulnerable parameter was `category` in the product filtering functionality. - Supplying normal category values such as `Gifts` returned valid pr… Blind SQL injection with conditional responses https://0xwalid.github.io/writeups/index.html?p=ps-sqli-11 ps-sqli-11 Tue, 16 Dec 2025 12:00:00 GMT administrator password — solved and documented end to end. SQL injection UNION attack, determining the number of columns returned by the query https://0xwalid.github.io/writeups/index.html?p=ps-sqli-07 ps-sqli-07 Sun, 14 Dec 2025 12:00:00 GMT - The vulnerable parameter was the `category` parameter on the product listing page. - Normal request: ``` category=Pets ```… SQL injection UNION attack, finding a column containing text https://0xwalid.github.io/writeups/index.html?p=ps-sqli-08 ps-sqli-08 Sun, 14 Dec 2025 12:00:00 GMT - The vulnerable parameter was `category` in the product filtering feature. - Normal values such as `Accessories` loaded products correctly. - Injecti… SQL injection UNION attack, retrieving data from other tables https://0xwalid.github.io/writeups/index.html?p=ps-sqli-09 ps-sqli-09 Sun, 14 Dec 2025 12:00:00 GMT - The vulnerable parameter was `category` in the product filtering functionality. - Supplying normal values such as `Pets` returned valid product list… SQL injection attack, listing the database contents on non Oracle databases https://0xwalid.github.io/writeups/index.html?p=ps-sqli-05 ps-sqli-05 Thu, 11 Dec 2025 12:00:00 GMT - The vulnerable parameter was located in the category field of the product listing system. - The original value was something like `category=Gifts`.… SQL injection attack, listing the database contents on Oracle https://0xwalid.github.io/writeups/index.html?p=ps-sqli-06 ps-sqli-06 Thu, 11 Dec 2025 12:00:00 GMT ---… SQL injection attack, querying the database type and version on MySQL and Microsoft https://0xwalid.github.io/writeups/index.html?p=ps-sqli-04 ps-sqli-04 Wed, 10 Dec 2025 12:00:00 GMT - The vulnerable parameter was located in the category field of a product listing endpoint. - The original value was `category=Pets`. Supplying normal… SQL Injection in WHERE Clause (Retrieve Hidden Data) https://0xwalid.github.io/writeups/index.html?p=ps-sqli-01 ps-sqli-01 Tue, 09 Dec 2025 12:00:00 GMT A boolean‑based SQL injection vulnerability inside the `category` parameter allowed retrieval of products normally hidden from the user.… SQL Injection Vulnerability Allowing Login Bypass https://0xwalid.github.io/writeups/index.html?p=ps-sqli-02 ps-sqli-02 Tue, 09 Dec 2025 12:00:00 GMT A classic boolean‑based SQL injection inside the login form allowed authentication as the `administrator` user without knowing the password.… Oracle SQL Injection – Extracting Database Type & Version (UNION‑Based Enumeration) https://0xwalid.github.io/writeups/index.html?p=ps-sqli-03 ps-sqli-03 Tue, 09 Dec 2025 12:00:00 GMT ---…