Server-side security war games: Part 15

Sat, 06 Jul 2013 10:33:00 -0400

We’re nearly at the end! This is the 2nd-last level.

We know there is a users table, with columns “username” and “password”. This time, the code just checks that the username exists. There’s no way to print out the data we want. Instead, we’ll have to do something cleverer.

Server-side security war games: Part 14

Thu, 04 Jul 2013 11:05:00 -0400

In level 14, we see a more traditional username & password form. Let’s check the source code to see if there are holes we can slip through.

Sql on Hashbang.ca

Server-side security war games: Part 15

Server-side security war games: Part 14