See if you can leak the whole database using what you know about SQL Injections. link
Don't know where to begin? Check out CTFlearn's SQL Injection Lab
Discussion
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
A lot of people overthink it just remember were and not to put the keywords
This will work ' or '1' = '1
I would also want to know why ' OR 1 = 1; -- statement does not work, but ' OR '1' = '1 is working.
This ' OR '1' = '1 is mentioned in The Lab. I think reading Wikipedia SQL injection will help me to understand it. Also I like that comments supports markdown :)
You forgot to include the semicolon - it should read: ' OR 1 = 1; --. Also, keep in mind that in MySQL, comments must include a space after the double dash. See the "Comments" section in: https://portswigger.net/web-security/sql-injection/cheat-sheet
Almost there :)
You're not "almost there" how is one supposed to have a single clue on how to "sanitize" it?
Sounds like you got the flag, you just need to submit it!
Hey Carter. We will soon have better ways for people to learn on this site, hang in there!
for me i got "unable to lunch lab"
2 weeks ago
cukup membuat mumet... karna mesin pada lab tidak bisa di luncurkan brooooo.....