webeasy

Gondex Beta 1

spbctf

Task: Search engine displaying SQL errors on invalid queries. Solution: Error-based SQL injection using extractvalue() function to extract data through XPath error messages.

$ ls tags/ techniques/
error_based_sqli_extractvaluexpath_error_injection

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]