ResumeLooters primarily employs SQL injection and XSS to breach targeted sites, mainly job-seeking and retail shops. Their pen-testing phase involved the use of open-source tools like: ...

This was a very bad sign, as it seemed the username was directly interpolated into the login SQL query. Sure enough, we had discovered SQL injection and were able to use sqlmap to confirm the ...