SQL injection Lab 9 Blind Injection with conditional errors
Автор: Saga Learns
Загружено: 2026-03-03
Просмотров: 13
Описание:
We will be covering the 9th lab for SQL Injection for Portswigger Web Security Academy.
This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted cookie.
The results of the SQL query are not returned, and the application does not respond any differently based on whether the query returns any rows. If the SQL query causes an error, then the application returns a custom error message.
The database contains a different table called users, with columns called username and password. You need to exploit the blind SQL injection vulnerability to find out the password of the administrator user.
To solve the lab, log in as the administrator user.
--
Join along at Portswigger:
https://portswigger.net/web-security
SQL Injection Labs:
https://portswigger.net/web-security/...
More information on SQL Injection:
https://owasp.org/www-community/attac...
--
Feedback is welcome.
If you found value, please leave a sub and a like. Maybe share it?
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
