Top all-time · #11183
Pentesterlab
Company blog · blog.pentesterlab.comsecurity
Pentesterlab is the company blog at blog.pentesterlab.com, writing about security. Since 2012, 7 different Hacker News readers have linked it 12 times, most often “CVE-2012-2661: exploitation write-up (Rails SQL Vulnerability)”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN commenters link PentesterLab's write-ups on exploiting the Ruby on Rails SQL injection vulnerability CVE-2012-2661, including the conditions required for exploitation. The comments only point to the posts.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Stay updated with the latest in penetration testing and web app security. The PentesterLab Blog offers expert articles, tutorials, and insights to enhance your InfoSec knowledge. Read now.
Most-linked posts?
- CVE-2012-2661: exploitation write-up (Rails SQL Vulnerability)2 people · 2 mentions · first linked 2012-06-01
What Hacker News says?
Did a quick write-up on the conditions required to exploit this: http://blog.pentesterlab.com/2013/01/on-exploiting-cve-2012-...
Comment linking /2013/01/on-exploiting-cve-2012-5664.html
on “SQL Injection Vulnerability in Ruby on Rails; affects all versions”Submitted CVE-2019–5418: on WAF bypass and caching as a story · 6 points
HN discussionhttp://blog.pentesterlab.com/2012/06/cve-2012-2661-exploitat... since it is already public i'm thinking of adding my own write up
Comment linking /2012/06/cve-2012-2661-exploitation-write-up.html
on “SQL Injection Vulnerability in Rails”Submitted /I Considered Harmful as a story · 4 points
HN discussionSubmitted Why the free exercises... as a story · 3 points
HN discussionSubmitted Test-Driven Security as a story · 2 points
HN discussionSubmitted A strategy to land your first pentest job as a story · 1 points
HN discussionSubmitted Who do you trust? A look at capath, cacert, cafile as a story · 1 points
HN discussionSubmitted Why isn’t PentesterLab’s content available in "Insert Language"? as a story · 1 points
HN discussionSubmitted Searching for files added by mistake on github as a story · 1 points
HN discussionSubmitted How not to get a good pentest... as a story · 1 points
HN discussionSubmitted CVE-2012-2661: exploitation write-up (Rails SQL Vulnerability) as a story · 1 points
HN discussion
