Reply To: Have some tryhackme boxes?

[Alvin]

I struggled three days about how to do blind sqli for oscp since sqlmap is banned, so does other automatically tools. I forced myself to do time-based injections manually on some boxes. It took forever. Then I realized it shouldn’t be. Some scripts should be okay. The guide that I want is avoiding these unnecessary rabbit holes to learn more efficiency.