Базовая авторизация 2 (Basic Auth 2)

hackerlab

Task: PHP login form with WAF filtering spaces in SQL queries. Solution: WAF bypass using SQL comments /**/ for boolean-based blind SQLi, character-by-character flag extraction with BINARY keyword for case-sensitive comparison.

waf_bypass sql_injection mysql case_sensitivity php blind_sqli boolean_based_sqli sql_comments substring character_extraction

WAF bypass using SQL comments /**/Boolean-based blind SQL injectionCharacter-by-character extraction with substring()MySQL case-sensitivity awareness (BINARY keyword)

$ ls tags/ techniques/

waf_bypass sql_injection mysql case_sensitivity php blind_sqli boolean_based_sqli sql_comments substring character_extraction

WAF bypass using SQL comments /**/Boolean-based blind SQL injectionCharacter-by-character extraction with substring()MySQL case-sensitivity awareness (BINARY keyword)

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ grep --similar

Similar writeups

[web][Pro]Базовая авторизация 3 — HackerLab— hackerlab
[web][Pro]Авторизация 2.0 (Authorization 2.0)— hackerlab
[web][Pro]Запретный код 2 (Forbidden Code 2) — HackerLab— hackerlab
[web][Pro]Доступ запрещён (Access Denied)— hackerlab
[web][Pro]Pryzhok— hackerlab