Blog

Writeups, tutorials and technical notes.

type

cat

diff

SQLi through a SOC's eyes: the 10 patterns to spot in your logs

SQL injection is the most heavily taught vulnerability in pentesting, but rarely from the detection side. This article covers 10 SQLi patterns to spot in your HTTP and SQL logs, and why SIEM correlation is what separates a false positive from an active attack.

#sqli#sql-injection#soc

6 minSeptember 1, 2026

watchEasy

IDOR: the OWASP #1 vulnerability nobody takes seriously

IDOR is the most basic flaw in the OWASP Top 10, and also one of the most exploited. This article covers the vulnerability, recent cases in France (litige.fr, ÉduConnect), why it still persists in 2026, how to defend against it, and how a SOC actually detects it.

#idor#owasp#access-control

8 minAugust 23, 2026

2 articles