webPromedium

Gondex Beta 2

web-kids20

Continuation of the "Gondex Beta 1" task. Same error-based SQL injection, but the flag is very long and exceeds the extractvalue() output limit (about 32 characters). Need to extract the flag in chunks using SUBSTRING().

$ ls tags/ techniques/
sqlimysqlsubstringerror_based_sqliextractvaluexpathlong_flag
error_based_sqli_extractvaluechunked_extraction_substringxpath_error_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups