3 ms·

Is it damage if you're just sending data to an endpoint to see what happens. Sounds like he didn't try to send a SQL Injection, he just sent more characters tha

Is it damage if you're just sending data to an endpoint to see what happens. Sounds like he didn't try to send a SQL Injection, he just sent more characters than what was expected.

freeone3000 6y ago
Yes. It's even damage if you're sending expected requests, but the owner of the server didn't want you to. See: Aaron Schwartz.