---
title: "Blind vulnerabilites ? - Cybr"
description: "Blind vulnerabilites ?: a thread from the General Discussions forum on Cybr, with 2 replies. Read-only archive."
url: https://cybr.com/forums/topic/blind-vulnerabilites/
---

Topic

# Blind vulnerabilites ?

2 replies

**Archived.** These forums are read-only. The conversation continues on [Discord](https://cybr.com/discord/).

1. Former member

   Jul 8, 2021

   Would it be best to focus on the blind sections of SQL I and OS Command Injections in this ongoing rat race in bug hunting ?

2. Christophe

   Jul 14, 2021

   Blind injections can be pretty tricky to pull off but they can also be quite rewarding. I've chatted with some bounty hunters who've been quite successful but who have never found a blind injection in the wild (mostly from not focusing on that much though I think)...so, could be a good area to focus on, but I'd expect a bit of a challenge!

   Former member

   Jul 14, 2021

   Well i have yet to earn a vulnerability in 13 months, calling this a challenge is a understatement. There is one other person i follow the XSS Rat, he recommended going after the Blind versions of each vulnerability since they are of course harder but not everyone is going after and would rather go after the low-hanging fruit.

[< Back to General Discussions](https://cybr.com/forums/forum/general-discussions/)