This commit is contained in:
2019-03-05 10:52:31 -06:00
parent a00487cec5
commit a7f201d05f
10 changed files with 9 additions and 19 deletions
-2
View File
@@ -1,7 +1,5 @@
# Clean room
---
(50 Linux) The year is 30xx. Clyde is trapped in an interdimensional transport
module. The Federation has captured the module and has prepared to dock. The
captain of the Federation lander has instructed the henchmen to bring Clyde in
-2
View File
@@ -1,7 +1,5 @@
# In Plain Text
---
(50 Binary RE) Created by: David Maples
Starring: Mary McCormack, Fred Weller, Nichole Hiltz, Todd Williams,
-2
View File
@@ -1,7 +1,5 @@
# Nyan
---
(50 Misc) Nyayanayanayanayanayanayanayan
```sh
-2
View File
@@ -1,7 +1,5 @@
## Turing Test
---
(50 Web) Break into his account!
[http://138.247.13.111](http://138.247.13.111)
-2
View File
@@ -1,7 +1,5 @@
# Things are not always what they seem
---
### Bash Ninja Games
Similares a los juegos de [Bandit](https://overthewire.org/wargames/bandit), son niveles
+2 -2
View File
@@ -1,9 +1,9 @@
# purvesta
---
(recon, 75) I love Github. Use it all the time! Just wish they could host a webpage...
---
## Desarrollo:
Analizando lo que nos dice el problema podemos buscar que Github tiene un
+2 -2
View File
@@ -1,9 +1,9 @@
# SQL Fun 1
---
(Web, 50) My Customer forgot his Password. His Fname is Jimmy. Can you get his password for me? It should be in the users table
---
## Desarrollo
Esto es uso de SQL, tenemos que encontrar el usuario Jimmy en la tabla users
+2 -2
View File
@@ -1,9 +1,9 @@
# SQL Fun 2
---
(Web, 50) A Client forgot his Password... again. Could you get it for me? He has a users account and his Lname is Miller if that helps at all. Oh! and Ken was saying something about a new table called passwd; said it was better to separate things.
---
## Desarrollo
Para este caso fue necesario hacer una union entre las distintas tablas.
+2 -2
View File
@@ -1,9 +1,9 @@
# Things are not always what they seem
---
(Web, 50) If you can't find it you're not looking hard enough.
---
## Desarrollo
Revisando el código fuente de la página encontramos la flag.
+1 -1
View File
@@ -21,7 +21,7 @@ Bastaba con formular una oración como la siguiente:
```sql
SELECT * FROM usr WHERE usuario='u' AND contrasena='' OR '1' = '1'%%
```
Bastó con llenar los campos de la siguiente manera:
Se llenaron los campos de la siguiente manera:
Usuario: root
Paswwrod: ' OR '1'='1