This post was voted as 2nd best in the Top 10 Web Hacking Techniques of 2011 poll.
Introduction
Last month I found a weird behaviour in a Java application during a blackbox pentest. The value of a parameter id was reflected to the HTTP response and I was testing for a potential SQLi vulnerability with the following requests (urldecoded) and responses:
