8

【RedTiger's Hackit】 Level 02 - Simple login-bypass

 2 years ago
source link: https://exp-blog.com/safe/ctf/redtigers-hackit/level-02-simple-login-bypass/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

【RedTiger's Hackit】 Level 02

提示是使用 SQL 条件进行登陆绕过。

很容易发现在 Password 输入框构造 payload 为 admin' or '1' = '1 使得密码永真，则可成功绕过。

由于 Password 永真，Username 随便填即可

得到 flag 和通关密码，完成挑战。

01.png

flag 下载后的 flagzip 的文件需要手动更改后缀为 *.zip，然后解压即可（为了避免直接刷答案）


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK