<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Sqli on tomato's blog</title><link>https://blog.akmee.xyz/tags/sqli/</link><description>Recent content in Sqli on tomato's blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 20 Apr 2026 14:48:49 -0300</lastBuildDate><atom:link href="https://blog.akmee.xyz/tags/sqli/index.xml" rel="self" type="application/rss+xml"/><item><title>CCTV Writeup - HackTheBox</title><link>https://blog.akmee.xyz/writeups/active/cctv/</link><pubDate>Thu, 19 Mar 2026 12:35:58 -0300</pubDate><guid>https://blog.akmee.xyz/writeups/active/cctv/</guid><description>CCTV is an easy Linux machine built around two real-world open-source camera management platforms. The attack path starts with default credential reuse on a ZoneMinder instance, leads into exploiting a blind SQL injection vulnerability to extract and crack credentials from the database, and finishes with privilege escalation through a motioneye service running as root.</description></item></channel></rss>