webProeasy

Login (easy)

spbctf

Task: Login form vulnerable to blind SQL injection. Solution: Time-based blind SQLi using SLEEP() function with binary search to extract admin password character by character.

$ ls tags/ techniques/
sqliblind_sqlitime_basedsleeplogin_form
binary_search_extractiontime_based_blind_sqlisleep_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups