webPromedium
O.H.F.U.K.
spbctf
Task: Web application using Sedna XML database with XQuery. Solution: XQuery injection in login field to extract flag document, bypassing authentication by injecting known hash.
$ ls tags/ techniques/
xquery_injectionhash_precomputationxml_document_extraction
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [misc][Pro]Хеш-станция (Hash Station)— hackerlab
- [web][Pro]Базовая авторизация 2 (Basic Auth 2)— hackerlab
- [web][Pro]Login (easy)— spbctf
- [web][Pro]Crawler— hackerlab
- [pwn][Pro]Вход не для всех (Entry is not for everyone)— hackerlab