webmedium

Dead or alive 8

spbctf

Task: perform SQL injection when a strict whitelist WAF blocks SELECT and UNION but allows ORDER BY, LIMIT, and OFFSET. Solution: enumerate table rows using ORDER BY + LIMIT 1 OFFSET N to iterate through records until the flag is found.

$ ls tags/ techniques/
waf_bypasssqlimysqlwhitelist_filterorder_bylimit_offset
order_by_enumerationlimit_offset_extractionblind_sqli
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]