In this lab, I encountered an SQL injection vulnerability disguised behind XML-encoded data, and the twist? It was gated by WAF filters. But as always — where there's obfuscation, there's a way. Let’s ...