sqlinjection print added
This commit is contained in:
parent
1209507c81
commit
accbd82724
@ -36,7 +36,9 @@ To login you can use the following credentials:
|
||||
## Hack and have fun !
|
||||
|
||||
If you are playing it in low dificulty, just to have a taste of how exploit a flaw in this app, go to ```SQL Injection``` in the left menu.
|
||||
In the id field, add this query ```%' and 1=0 union select null, concat(first_name,'|',last_name,'|',user,'|',password) from users #```
|
||||
In the id field, add this query:
|
||||
|
||||
%' and 1=0 union select null, concat(user,':',password) from users #
|
||||
|
||||
![sqli](sqli.png)
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user