Web Security Academy ~ SQLi (Lab #2) ⚙️
If the query returns the details of a user, then the login is successful. Otherwise, it is rejected.
In this lab an attacker can log in as any user without a password simply by using the SQL comment sequence -- (double-dash) to remove the password check from the WHERE clause of the query.
By submitting the username administrator'-- the password results in the following query:
SELECT * FROM users WHERE username = 'administrator'--' AND password = ''
Ignoring the password field, because it comes after the comment sequence (double-dash)
This query returns the user whose username is administrator and successfully logs the attacker in as that user.
💙💙💙💙💙💙💙💙💙💙💙💙
FREE CYBER SECURITY LEARNING RESOURCES :
The Cyber Mentor --- https://academy.tcm-sec.com
Nathan House --- https://www.stationx.net
John Hammond --- https://johnhammond.org
Loi Liang --- https://loiliangyang.com
HackerSploit --- https://hackersploit.org
David Bombal --- https://davidbombal.com
Professor Messer --- https://www.professormesser.com
w3schools --- https://www.w3schools.com
#hacktolearn #websecurityacademy #sqli #commentsequence #doubledash
-
2:58:53
Jewels Jones Live ®
1 day agoVIOLENT RHETORIC | A Political Rendezvous - Ep. 92
45K33 -
1:13:17
Exploring With Nug
12 hours agoMissing Person's Remains Found In Virginia Well
25.6K9 -
2:00:56
Tate Speech by Andrew Tate
10 hours agoEMERGENCY MEETING EPISODE 76 - GYAL DEM
236K386 -
23:06
MYLUNCHBREAK CHANNEL PAGE
1 day agoThe Old World is in The Catacombs? - Part 3
47.9K25 -
LIVE
Right Side Broadcasting Network
5 days agoLIVE REPLAY: Pres. Trump Holds a Rally in Wilmington, NC on Jobs, Inflation, & the Economy - 9/21/24
5,126 watching -
47:18
Vigilant News Network
1 day agoShocking Details Emerge About Trump’s Would-Be Assassin and “Wife” | The Morning Catch Up
75.8K45 -
1:01:43
Michael Franzese
1 day agoDemocrat Party is Evil: The Border, Cover Ups, Fraud | Michael Franzese LIVE! Ep. 19
90.6K77 -
12:04
Liam Reid
1 day ago9-Year-Old 250 2 Stroke vs Modern 4 Stroke!
84.7K7 -
15:07
CartierFamily
2 days agoRepublican CALMLY DISMANTLES CNN Host Over GOP Denied Bill! 🔥
91.9K163 -
20:10
Degenerate Jay
13 hours ago $7.18 earnedThe PlayStation 5 Pro Is Bad News For Gaming
83.3K17