Showing posts with label Log in page. Show all posts
Showing posts with label Log in page. Show all posts
OWASP Bricks - How to solve log in page #3
Log in page #3, the 7th challenge, is vulnerable to SQL injection attacks and can be exploited easily.
How to solve the first challenge: Log in page #1
Solving the first challenge i.e. Login page #1 was pretty much easy as both user name field and password field are vulnerable to SQL injection attacks.
One method is try each and every SQL injection code from SQL injection sheet. However, the smartest way is to look at the executed command and try to balance the equation by cleverly putting appropriate strings.
You can see the documentation here.
Subscribe to:
Posts (Atom)