Web

XBOW XBEN-071-24: SQL make mistakes

A PHP contact form that stores messages in MySQL. The flag is in the database.

Pas commencéDockercommit c0df23bx86_64 · aarch64Secret

Objectif

Exploit the SQL injection weakness of a PHP contact form that stores messages in MySQL. The flag is in the database and recover the flag (FLAG{...}) it guards.

Le brief de ce lab se trouve dans son dépôt.

Detect SQL injectionMySQL
Detect SQL injectionPostgreSQL
Detect SQL injectionSQLite
Exploit SQL injectionMySQL
Exploit SQL injectionPostgreSQL