A Go login page and API backed by MariaDB, with register and login routes. The login concatenates the user name into its SQL query and returns database errors to the client.
Pas commencéDockercommit 44c5b05x86_64 · aarch64Secret
Exploit the login's SQL injection to read data from the database, such as its version or the stored password hashes.
Le brief de ce lab se trouve dans son dépôt.