| 일 | 월 | 화 | 수 | 목 | 금 | 토 |
|---|---|---|---|---|---|---|
| 1 | 2 | |||||
| 3 | 4 | 5 | 6 | 7 | 8 | 9 |
| 10 | 11 | 12 | 13 | 14 | 15 | 16 |
| 17 | 18 | 19 | 20 | 21 | 22 | 23 |
| 24 | 25 | 26 | 27 | 28 | 29 | 30 |
- 방명록 만들기
- Layered Architecture
- Database
- spring
- jsp
- 인턴 후기
- ㅁㅇㅂ??ㅇㅈㄷ ㅎㅇㅌ...
- 정보보호병 후기
- 행정지역 DB
- DBMS
- mysql
- 네이버 인턴
- Django
- reversing.kr
- frontend
- 소개딩
- riceteacatpanda
- webhacking 처음
- restapi
- 인턴 지원
- 3단계 지역 DB
- SessionAttribute
- 동읍면 DB
- Forensic 절차
- JSTL
- EER
- 메모리 포랜식
- 소프트웨어 개발보안 경진대회
- PyAmdecoder
- react
- Today
- Total
목록WEB_HACKING (112)
웹찢남
include "./config.php"; login_chk(); $db = mongodb_connect(); $query = array( "id" => $_GET['id'], "pw" => $_GET['pw'] ); echo "query : ".json_encode($query).""; $result = mongodb_fetch_array($db->prob_cerberus->find($query)); if($result['id']) echo "Hello {$result['id']}"; if($result['id'] === "admin") solve("cerberus"); highlight_file(__FILE__);?> 산넘어 산이라고 이번엔 몽고db다...몽고db는 지금까지..
include "./config.php"; login_chk(); $db = mssql_connect("kraken"); if(preg_match('/master|information|;/i', $_GET['id'])) exit("No Hack ~_~"); if(preg_match('/master|information|;/i', $_GET['pw'])) exit("No Hack ~_~"); $query = "select id from member where id='{$_GET['id']}' and pw='{$_GET['pw']}'"; echo "query : {$query}"; $result = sqlsrv_fetch_array(sqlsrv_query($db,$query)); if($res..
include "./config.php"; login_chk(); $db = mssql_connect("mummy"); if(preg_match('/master|sys|information|;|\(|\//i', $_GET['query'])) exit("No Hack ~_~"); for($i=0;$istrlen($_GET['query']);$i++) if(ord($_GET['query'][$i]) 32) exit("%01~%20 can used as whitespace at mssql"); $query = "select".$_GET['query']; echo "query : {$query}"; $result = sqlsrv_fetch_array(sqlsrv_query($db,$query)); ..
include "./config.php"; login_chk(); $db = mssql_connect("yeti"); if(preg_match('/master|sys|information|;/i', $_GET['id'])) exit("No Hack ~_~"); if(preg_match('/master|sys|information|;/i', $_GET['pw'])) exit("No Hack ~_~"); $query = "select id from prob_yeti where id='{$_GET['id']}' and pw='{$_GET['pw']}'"; echo "query : {$query}"; sqlsrv_query($db,$query); $query = "select pw from pro..
revenant-writeup
include "./config.php"; login_chk(); $db = mssql_connect(); if(preg_match('/master|sys|information|prob|;|waitfor|_/i', $_GET['id'])) exit("No Hack ~_~"); if(preg_match('/master|sys|information|prob|;|waitfor|_/i', $_GET['pw'])) exit("No Hack ~_~"); $query = "select * from prob_revenant where id='{$_GET['id']}' and pw='{$_GET['pw']}'"; echo "query : {$query}"; sqlsrv_query($db,$query); i..
Nessie-writeup
include "./config.php"; login_chk(); $db = mssql_connect(); if(preg_match('/master|sys|information|prob|;|waitfor|_/i', $_GET['id'])) exit("No Hack ~_~"); if(preg_match('/master|sys|information|prob|;|waitfor|_/i', $_GET['pw'])) exit("No Hack ~_~"); $query = "select id from prob_nessie where id='{$_GET['id']}' and pw='{$_GET['pw']}'"; echo "query : {$query}"; sqlsrv_query($db,$query); if..