~$whoami

qyrn://blog

qyrn

GitHubHTBTHM
Browse postsAbout

Latest posts

View all
watchMediumWeb

SQLi through a SOC's eyes: the 10 patterns to spot in your logs

SQL injection is the most heavily taught vulnerability in pentesting, but rarely from the detection side. This article covers 10 SQLi patterns to spot in your HTTP and SQL logs, and why SIEM correlation is what separates a false positive from an active attack.

#sqli#sql-injection#soc#siem
6 min·September 1, 2026
watchEasy

IDOR: the OWASP #1 vulnerability nobody takes seriously

IDOR is the most basic flaw in the OWASP Top 10, and also one of the most exploited. This article covers the vulnerability, recent cases in France (litige.fr, ÉduConnect), why it still persists in 2026, how to defend against it, and how a SOC actually detects it.

#idor#owasp#access-control
8 minAugust 23, 2026

Tags

All tags
soc2web2sqli1sql-injection1siem1detection1idor1owasp1access-control1pentest1
Browse all posts

© 2026 qyrn

GitHubHTBTHMRSS