ABOUT ME

-

Today
-
Yesterday
-
Total
-
  • LOS darkelf
    WebHacking/Load Of Sql Injection 2018. 2. 13. 19:33
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    <?php 
      include "./config.php"
      login_chk(); 
      dbconnect();  
      if(preg_match('/prob|_|\.|\(\)/i'$_GET[pw])) exit("No Hack ~_~"); 
      if(preg_match('/or|and/i'$_GET[pw])) exit("HeHe"); 
      $query = "select id from prob_darkelf where id='guest' and pw='{$_GET[pw]}'"
      echo "<hr>query : <strong>{$query}</strong><hr><br>"
      $result = @mysql_fetch_array(mysql_query($query)); 
      if($result['id']) echo "<h2>Hello {$result[id]}</h2>"
      if($result['id'== 'admin') solve("darkelf"); 
      highlight_file(__FILE__); 
    ?>
    cs



    C언어를 써봤으면 풀수있는 문제다. 

    ||, && ..

    'WebHacking > Load Of Sql Injection' 카테고리의 다른 글

    LOS troll  (0) 2018.02.13
    LOS orge  (0) 2018.02.13
    LOS wolfman  (0) 2018.02.13
    LOS orc  (0) 2018.02.13
    LOS goblin  (0) 2018.02.13
Designed by Tistory.