webhard

UUIDY

duckerz

Task: Notes app with Telegram auth, get admin password hash. Solution: Predict UUID tokens using extracted MAC address + race condition to get admin JWT, then boolean-based SQLi via f-string in is_user_exists() to extract hash character by character.

$ ls tags/ techniques/
sqlirace_conditionpredictable_tokentelegram_botuuidboolean_sqli
race_condition_exploittoken_predictionboolean_based_sqli
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]