Dumb fix
This commit is contained in:
@@ -1,7 +1,5 @@
|
||||
# Clean room
|
||||
|
||||
---
|
||||
|
||||
(50 Linux) The year is 30xx. Clyde is trapped in an interdimensional transport
|
||||
module. The Federation has captured the module and has prepared to dock. The
|
||||
captain of the Federation lander has instructed the henchmen to bring Clyde in
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
# In Plain Text
|
||||
|
||||
---
|
||||
|
||||
(50 Binary RE) Created by: David Maples
|
||||
|
||||
Starring: Mary McCormack, Fred Weller, Nichole Hiltz, Todd Williams,
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
# Nyan
|
||||
|
||||
---
|
||||
|
||||
(50 Misc) Nyayanayanayanayanayanayanayan
|
||||
|
||||
```sh
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
## Turing Test
|
||||
|
||||
---
|
||||
|
||||
(50 Web) Break into his account!
|
||||
|
||||
[http://138.247.13.111](http://138.247.13.111)
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
# Things are not always what they seem
|
||||
|
||||
---
|
||||
|
||||
### Bash Ninja Games
|
||||
|
||||
Similares a los juegos de [Bandit](https://overthewire.org/wargames/bandit), son niveles
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# purvesta
|
||||
|
||||
---
|
||||
|
||||
(recon, 75) I love Github. Use it all the time! Just wish they could host a webpage...
|
||||
|
||||
---
|
||||
|
||||
## Desarrollo:
|
||||
|
||||
Analizando lo que nos dice el problema podemos buscar que Github tiene un
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# SQL Fun 1
|
||||
|
||||
---
|
||||
|
||||
(Web, 50) My Customer forgot his Password. His Fname is Jimmy. Can you get his password for me? It should be in the users table
|
||||
|
||||
---
|
||||
|
||||
## Desarrollo
|
||||
|
||||
Esto es uso de SQL, tenemos que encontrar el usuario Jimmy en la tabla users
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# SQL Fun 2
|
||||
|
||||
---
|
||||
|
||||
(Web, 50) A Client forgot his Password... again. Could you get it for me? He has a users account and his Lname is Miller if that helps at all. Oh! and Ken was saying something about a new table called passwd; said it was better to separate things.
|
||||
|
||||
---
|
||||
|
||||
## Desarrollo
|
||||
|
||||
Para este caso fue necesario hacer una union entre las distintas tablas.
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
# Things are not always what they seem
|
||||
|
||||
---
|
||||
|
||||
(Web, 50) If you can't find it you're not looking hard enough.
|
||||
|
||||
---
|
||||
|
||||
## Desarrollo
|
||||
|
||||
Revisando el código fuente de la página encontramos la flag.
|
||||
|
||||
+1
-1
@@ -21,7 +21,7 @@ Bastaba con formular una oración como la siguiente:
|
||||
```sql
|
||||
SELECT * FROM usr WHERE usuario='u' AND contrasena='' OR '1' = '1'%%
|
||||
```
|
||||
Bastó con llenar los campos de la siguiente manera:
|
||||
Se llenaron los campos de la siguiente manera:
|
||||
|
||||
Usuario: root
|
||||
Paswwrod: ' OR '1'='1
|
||||
|
||||
Reference in New Issue
Block a user