Awae

SQLi

1. Book: https://www.amazon.es/Injection-Attacks-Defense-Justin-Clarke-Salt/dp/1597499633/ref=sr_1_1?dchild=1&qid=1602713963&refinements=p_27%3AJustin+Clarke-Salt&s=books&sr=1-1

2. https://portswigger.net/web-security/sql-injection

3. https://www.pentesterlab.com/exercises/from_sqli_to_shell/course

4. https://pentesterlab.com/exercises/from_sqli_to_shell_II/course

5. https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SQL%20Injection

6. http://pentestmonkey.net/category/cheat-sheet/sql-injection

7. https://sqlwiki.netspi.com/

8. https://medium.com/bugbountywriteup/sql-injection-to-lfi-to-rce-536bed29a862

9. https://owasp.org/www-community/attacks/Blind_SQL_Injection

XSS

1. XSS + SQL + RCE: https://sarthaksaini.com/2019/awae/xss-rce.html

(change)