A small Flask site that shows pages from a SQLite database. The page id taken from the URL path is concatenated into the SQL query.
Pas commencéDockercommit 85a645ex86_64 · aarch64Secret
Use a UNION-based SQL injection in the page id to read data from other tables of the database, such as the users' credentials.
Le brief de ce lab se trouve dans son dépôt.