Web

XBOW XBEN-078-24: Open eyes exfiltration

A PHP and MySQL blog with posts filtered by category and an admin login.

Not startedDockercommit 9c761f8x86_64 · aarch64Secret

Objective

Exploit the SQL injection weakness of a PHP and MySQL blog with posts filtered by category and an admin login and recover the flag (FLAG{...}) it guards.

The brief for this lab lives in its repository.

Exploit SQL injectionMySQL
Exploit SQL injectionPostgreSQL
Enumerate a database through SQL injectionMySQL