Jack Rhysider AUTHORED Darknet Diaries
Jack says that he created the Darknet Diaries show.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“This show is created by me, the spaghetti coder, Jack Rhysider.”
Episode
04 November 2025 Official episode · Official transcript
penetration test incident response
Tanya Janca discusses application security, SQL injection, blind SQL injection, incident response, help-desk evidence handling, CTFs, and building secure-coding programs.
Topics: Application security and secure coding, SQL injection and authentication bypass, Blind SQL injection and boolean inference, Server-side request forgery, Penetration testing, Network traffic analysis with Wireshark, Dynamic application scanning with ZAP, Incident response and escalation, Digital evidence preservation and chain of custody, Help-desk security-incident training, Data exfiltration, Network congestion and self-inflicted denial of service, Security-policy discoverability and compliance
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Jack Rhysider AUTHORED Darknet Diaries
Jack says that he created the Darknet Diaries show.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“This show is created by me, the spaghetti coder, Jack Rhysider.”
Tanya Janca ASSOCIATED_WITH Application security
Tanya's professional focus is application security, or appsec.
Explicit Confidence 99% · Jack Rhysider EP 165 Details
“that’s called appsec, application security. She’s laser-focused on how applications become insecure and how to make them secure.”
Tanya Janca USES penetration testing
Tanya was recruited to help perform penetration tests.
Explicit Confidence 97% · Jack Rhysider EP 165 Details
“You can help me do some penetration test.”
Tanya Janca USES Burp Suite
Tanya learned and used Burp Suite as part of her penetration-testing work.
Explicit Confidence 96% · Tanya Janca EP 165 Details
“go learn Burp Suite this weekend”
“I just found server-side request forgery.”
Server-side request forgery DISCOVERED_BY Tanya Janca
Tanya says she found server-side request forgery while testing an application.
Explicit Confidence 98% · Tanya Janca EP 165 Details
“I found server-side request forgery.”
Tanya Janca USES Server-side request forgery
While penetration testing, Tanya entered code that resulted in server-side request forgery and unintended file operations.
Derived Confidence 84% · Tanya Janca EP 165 Details
“Inadvertently, I started copying and deleting files on the web server.”
“I found server-side request forgery.”
Tanya Janca USES incident response
Tanya led incident responders and managed serious security incidents.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, I was the lead of the incident responders.”
“I’m the head of incident response.”
Tanya Janca USES Wireshark
Tanya directed her team to use Wireshark to investigate the supposed malware incident.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“someone flip on Wireshark.”
Tanya Janca USES Capture the Flag
Tanya participated in CTFs and organized two women's CTF teams.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I did do a few CTFs.”
“we had to form two teams”
Tanya Janca USES SQL injection
Tanya used SQL injection to bypass a login screen during a CTF.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I’m sure there’s gonna be some sort of SQL injection opportunity.”
“we got in.”
Blind SQL injection VARIANT_OF SQL injection
The episode presents blind SQL injection as a form of SQL injection that returns yes/no-style results rather than directly returning data.
Derived Confidence 96% · Tanya Janca EP 165 Details
“what you’re doing when you do blind SQL injection is you are asking questions”
“the only option you get back is yes or no”
Blind SQL injection LEADS_TO Data exfiltration
The episode explains that blind SQL injection enabled the attacker to infer and exfiltrate the database contents.
Derived Confidence 94% · Tanya Janca EP 165 Details
“So, they did exfiltrate our data, and that is what happened”
“you can know for sure that it’s true”
SQL injection AFFECTS SQL server
The episode describes an SQL injection attack against the SQL server itself.
Explicit Confidence 96% · Tanya Janca EP 165 Details
“‘cause they attacked the SQL server itself”
Tanya says ZAP used to be part of OWASP.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“ZAP is a dynamic scanning tool that used to be part of OWASP”
Tanya Janca ASSOCIATED_WITH Canadian government
Tanya held a security leadership position at an organization within the Canadian government.
Explicit Confidence 98% · Jack Rhysider EP 165 Details
“a security leadership position at an organization which was within the Canadian government”
Tanya Janca ASSOCIATED_WITH Defcon
Tanya attended Defcon and took a blind SQL injection workshop there.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, then I went to Defcon and I did a workshop called Blind SQL Injection.”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:47:46.541974+00:00