$100 Time Based Sql Injection Bug Bounty PoC

uhmm so here's a short context about the POC :
I was manually testing the site for blind SSRF and then burp bounty notifies me that it is vulnerable to time based sqli... :)

[@brunobandeira2532]

Is this burp bounty pro extension cracked or did you actually buy it? if so, please send me the link

[@tusharhackseverything]

this program doesn't respond.. found multiple bugs in it

[@FakerPK]

can you explain what this is about?

[@randreu28]

As far as my understanding goes, it basically is a cybersecurity attack. It works by manipulating what the client machine (you as a user entering a website, for example) sends to the server machine ( the machine that controls the website) to execute commands in the database at will. In this particular case, a time based command execution of waiting for x time to respond.

[@rohancyber]

bro how did you burp scan for vulnerabilities and notify you can you elaborate it. Thanks

[@marco1337-PT]

I use burp bounty for fun

[@Hackerone1444]

is sqli work on cookie side ?

[@bambangsutrisna5006]

works

[@Hackerone1444]

@@bambangsutrisna5006 any random cookies ? Example: will every session cookie side work ?

[@ayushmanngupta7027]

hey bro can you share your burpsuite pro link so that I can download your burpsuite

[@Aakarshmishra01]

Bro how did you found that target? I mean is it by dorks or something??

[@marco1337-PT]

dork

[@TuanNguyen-ve9xf]

When i use burp with https, all infor was hashed, can u tell me how to fix it 😬

[@landless-wind]

chelsy was here

[@marco1337-PT]

hahaha Bai

[@ariadesupriyatna]

🎉

[@abhinavbansal9396]

So they were putting cookie value in sql statement?

[@marco1337-PT]

SQLi via cookie

[@_sl1de_]

Why only 100 ?

[@leo___333]

Because he is not exploited

[@rifaelsitorus5211]

What burp extension do you use?

[@marco1337-PT]

burp bounty

[@ederferreira3764]

What is your twitter? How do I contact you?

[@marco1337-PT]

Facebook