pwnmedium

Хаос на АЗС (Chaos at the Gas Station)

hackerlab

Task: Web app for gas station management with admin panel. Solution: User enumeration via different error messages, password bruteforce, then SQL injection via backup upload to change superadmin password and access secret section.

$ ls tags/ techniques/
sql_injectionfile_uploadbruteforceuser_enumerationhash_crackingdouble_sha256
password_bruteforceuser_enumeration_via_error_messagessql_injection_via_backup_uploadhash_algorithm_analysis
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]