webeasy

Dead or alive 6

spbctf

Task: SQL injection with comma character filtered. Solution: Use JOIN technique to bypass comma filter - each subquery returns one column and JOIN combines them without commas.

$ ls tags/ techniques/
waf_bypasssqlimysqlunion_injectioncomma_bypass
join_comma_bypasscommaless_union_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]