~ / writeups / ledger

Ledger

Second-order SQLi found from source review to auth bypass.

Source review

Whitebox access reveals a stored value re-used unsanitised in a later query — a classic second-order SQL injection.

Exploitation

Craft the stored payload so the follow-up query leaks credentials, then bypass authentication.