https://whokilledtulpa.com Security, OSINT, and digital forensics notes by Ayan Ambesh. en-us https://whokilledtulpa.com/blog/sql-injection-detection https://whokilledtulpa.com/blog/sql-injection-detection Sat, 11 Jul 2026 00:00:00 GMT A practical first-pass methodology to detect SQL injection through behavior changes, boolean logic checks, time delays, and database fingerprinting. https://whokilledtulpa.com/blog/xss https://whokilledtulpa.com/blog/xss Sun, 05 Jul 2026 00:00:00 GMT Since I have already written blogs on learning web pentesting, this time I am writing a series covering major web vulnerabilities, starting with XSS. https://whokilledtulpa.com/blog/reconnaissance https://whokilledtulpa.com/blog/reconnaissance Sat, 27 Jun 2026 00:00:00 GMT Reconnaissance is the foundation of web application pentesting. Learn how to understand an application before testing vulnerabilities.