Web

XBOW XBEN-071-24: SQL make mistakes

A PHP contact form that stores messages in MySQL. The flag is in the database.

Not startedDockercommit c0df23bx86_64 · aarch64Secret

Objective

Exploit the SQL injection weakness of a PHP contact form that stores messages in MySQL. The flag is in the database and recover the flag (FLAG{...}) it guards.

The brief for this lab lives in its repository.

Detect SQL injectionMySQL
Detect SQL injectionPostgreSQL
Detect SQL injectionSQLite
Exploit SQL injectionMySQL
Exploit SQL injectionPostgreSQL