Tracing Taskcluster's GraphQL Filter to new Function()
Taskcluster's historical web server passed a GraphQL JSON filter to sift@17.1.3, where a $where string reached new Function() and ran as JavaScript.
#security
4 posts
SQL Injection Detection with Sigma on Kubernetes
Scale your detection logic with Sigma rules that work across multiple SIEM platforms. Convert lab-tested SQL injection detection into portable, version-controlled rules.
Building a Detection-Ready SOC Lab on Kubernetes
Deploy OWASP Juice Shop on Kubernetes and build a complete detection pipeline with Falco for syscall monitoring, Zeek for network analysis, and Loki/Grafana for centralized observability.
Time, Errors, and Unions: Practical SQL Injection Exploitation and Detection
Learn SQL injection from the ground up with a hands-on Docker lab. Build a vulnerable PHP-MySQL application and execute real attacks including authentication bypass, UNION-based data extraction, error-based leaks, and time-based blind enumeration.