webeasy

Dead or alive 5

spbctf

Task: SQL injection with WAF blocking SELECT keyword. Solution: Mixed case bypass (SeLeCt) since MySQL keywords are case-insensitive but the filter is case-sensitive.

$ ls tags/ techniques/
waf_bypasssqlimysqlcase_bypasskeyword_filter
mixed_case_keyword_bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]