SQL INJECTION FUNDAMENTALS HTB # 3 - Skills Assessment

preview_player
Показать описание
Assess the web application and use a variety of techniques to gain remote code execution and find a flag in the / root directory of the file system. Submit the contents of the flag as your answer.
Рекомендации по теме
Комментарии
Автор

I got this type of error for same query any helps..
Can't create/write to file (Errcode: 2 "No such file or directory")

NiralShekhat
Автор

1, thank you, keep up the, good creative, work-- -

LukeWago
Автор

you can use curl too. it is more confortable. when you upload the shell, use in terminal curl . use curl to navigate too.

LucasGuitar
Автор

I used ?0=ls / at first but got nothing. Then i tried the ?0=dir / and it displayed the flag in the directory lisitng. But instead of using LOAD_FILE i was able to use ?0=cat "flag_cae.." and have it displayed all the same.

coopergaffney
Автор

Please make video for SQL map essentials. Bug bounty hunter

subhashkr
Автор

Hi there, I have followed all the steps that had been mentioned, but finally I have found the flag that platform don't accept . Maybe somebody has met this problem?

МаксимИлоев-жй
Автор

when i try creating the new shell1.php with the 'dir /' command in payload, it shows empty... i though maybe it is in linux so i tried ls -la but didnt show the directory of that flag... what can i do to find the flag file name? maybe the 'locate' command to locate the word flag?

kernshell
Автор

New problem, i found out i had to do CN' UNION and not ' UNION, then it showed me the flag file name, but when i do LOAD_FILE("cae1dadcd174.txt") it doesnt do anything, doesnt even return a table, and i did it with 1, LOAD_FILE, 3, 4, 5-- -

kernshell