--- title: Best InfoSec Write-ups posts — September 2022 | daily.dev description: The most upvoted InfoSec Write-ups posts from September 2022, curated by the daily.dev community. canonical: https://daily.dev/sources/infosecwriteups/best-of/2022/09 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/infosecwriteups/best-of/2022/09 og:type: website og:site_name: daily.dev og:title: Best InfoSec Write-ups posts — September 2022 | daily.dev og:description: The most upvoted InfoSec Write-ups posts from September 2022, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of InfoSec Write-ups — September 2022 1. 1 [](https://daily.dev/posts/how-i-hacked-my-college-s-student-portal-pzid3bf39 "How I Hacked my College’s student portal") Article InfoSec Write-ups · 4y How I Hacked my College’s student portal The student portal is a third party web portal for students in which students can check their time table, attandance, profile, fee dues and many other stuff. It was a simple IDOR bug with a huge impact. The leaked data also have 10th and 12th class marks. 37 5 2. 2 [](https://daily.dev/posts/how-i-found-multiple-sql-injections-in-5-minutes-in-bug-bounty-gww5-nr9x "How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty") Article InfoSec Write-ups · 4y How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty SQL Injection is one of the most critical vulnerabilities that can be found in web applications. I will show you today how I found multipleSQL Injection vulnerabilities while hunting in Bug Bounty program. 16 3. 3 [](https://daily.dev/posts/how-i-hacked-an-exam-portal-and-got-access-to-10k-users-data-including-webcams-ovrmlhva0 "How I hacked an exam portal and got access to 10K+ users data including webcams") Article InfoSec Write-ups · 4y How I hacked an exam portal and got access to 10K+ users data including webcams How I hacked an exam portal and got access to 10K+ users data including webcams Hello guys, I am Faique a security researcher and a bug bounty hunter. 11 4. 4 [](https://daily.dev/posts/try-hack-me-basic-pentesting-walkthrough-2oxzfnusm "Try Hack Me: Basic Pentesting Walkthrough") Article InfoSec Write-ups · 4y Try Hack Me: Basic Pentesting Walkthrough This is the second walkthrough that I decide to write and diferently from de first, this has more to do with my main interest that is pentest. This room gives an opportunity for those who are starting like me to apply what learned in a real scenario of pentest. 10 — What is the final password you obtain? So, we need to read that Kay's file. 10 1 [See all InfoSec Write-ups archives](/sources/infosecwriteups/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/infosecwriteups/best-of/2022/09#page","url":"https://daily.dev/sources/infosecwriteups/best-of/2022/09","name":"Best InfoSec Write-ups Posts — September 2022","description":"The most upvoted InfoSec Write-ups posts from September 2022, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/infosecwriteups/best-of/2022/09#items","numberOfItems":4,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/how-i-hacked-my-college-s-student-portal-pzid3bf39","name":"How I Hacked my College’s student portal"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/how-i-found-multiple-sql-injections-in-5-minutes-in-bug-bounty-gww5-nr9x","name":"How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/how-i-hacked-an-exam-portal-and-got-access-to-10k-users-data-including-webcams-ovrmlhva0","name":"How I hacked an exam portal and got access to 10K+ users data including webcams"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/try-hack-me-basic-pentesting-walkthrough-2oxzfnusm","name":"Try Hack Me: Basic Pentesting Walkthrough"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/infosecwriteups/best-of"},{"@type":"ListItem","position":5,"name":"September 2022"}]}]} ```