maik/Personal-Website
1
0
Fork 0
mirror of https://github.com/maikka39/Personal-Website.git synced 2026-09-27 20:46:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improve SEO and code formatting

Browse Source
This commit is contained in:
maik
2021-04-08 15:05:17 +02:00
parent c6fbd73a16
commit 16261320d9
17 changed files with 309 additions and 213 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/posts/adventofctf/challenge_6.md
+3 -3
View File
@@ -254,13 +254,13 @@ This query also has to be converted to an input first. This will become `' UNION
After submitting this input, I got the flag: `NOVI{7h1s_flag_w@s_chuncky_right}`.
\*Note: this only works if a table has only one column, if it has more, you have to get the columns first. See the [Getting the secrets](#optional-getting-the-secrets-) for more info about that.
\*Note: this only works if a table has only one column, if it has more, you have to get the columns first. See the [Getting the secrets]({{< ref "#getting-the-secrets" >}}) for more info about that.
This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#6-7).
_For more information about how SQL injection works, please read my [previous post](/posts/2020/12/challenge-5-adventofctf/)._
_For more information about how SQL injection works, please read my [previous post]({{< ref "challenge_5.md" >}})._
## (Optional) Getting the secrets 😋
## (Optional) Getting the secrets 😋 {#getting-the-secrets}
Because the `secrets` table a more than one column, we need to know the column names first. We can get them with the following query: