목록WEB_HACKING (112)

웹찢남

Skeleton-writeup

include "./config.php";   login_chk();   $db = dbconnect();   if(preg_match('/prob|_|\.|\(\)/i', $_GET[pw])) exit("No Hack ~_~");   $query = "select id from prob_skeleton where id='guest' and pw='{$_GET[pw]}' and 1=0";   echo "query : {$query}";   $result = @mysqli_fetch_array(mysqli_query($db,$query));   if($result['id'] == 'admin') solve("skeleton");   highlight_file(__FILE__); ?> 뒤에 and 1=0을 ..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:12
Vampire-writeup

include "./config.php";   login_chk();   $db = dbconnect();   if(preg_match('/\'/i', $_GET[id])) exit("No Hack ~_~");  $_GET[id] = strtolower($_GET[id]);  $_GET[id] = str_replace("admin","",$_GET[id]);   $query = "select id from prob_vampire where id='{$_GET[id]}'";   echo "query : {$query}";   $result = @mysqli_fetch_array(mysqli_query($db,$query));   if($result['id'] == 'admin') solve("vampire..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:10
Troll-writeup

include "./config.php";   login_chk();   $db = dbconnect();   if(preg_match('/\'/i', $_GET[id])) exit("No Hack ~_~");  if(preg_match("/admin/", $_GET[id])) exit("HeHe");  $query = "select id from prob_troll where id='{$_GET[id]}'";  echo "query : {$query}";  $result = @mysqli_fetch_array(mysqli_query($db,$query));  if($result['id'] == 'admin') solve("troll");  highlight_file(__FILE__);?> 자세히 보면 ..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:08
Orge - writeup

include "./config.php";   login_chk();   $db = dbconnect();   if(preg_match('/prob|_|\.|\(\)/i', $_GET[pw])) exit("No Hack ~_~");   if(preg_match('/or|and/i', $_GET[pw])) exit("HeHe");   $query = "select id from prob_orge where id='guest' and pw='{$_GET[pw]}'";   echo "query : {$query}";   $result = @mysqli_fetch_array(mysqli_query($db,$query));   if($result['id']) echo "Hello {$result[id]}";   ..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:04
Darkelf-writeup

include "./config.php";   login_chk();   $db = dbconnect();    if(preg_match('/prob|_|\.|\(\)/i', $_GET[pw])) exit("No Hack ~_~");   if(preg_match('/or|and/i', $_GET[pw])) exit("HeHe");   $query = "select id from prob_darkelf where id='guest' and pw='{$_GET[pw]}'";   echo "query : {$query}";   $result = @mysqli_fetch_array(mysqli_query($db,$query));   if($result['id']) echo "Hello {$result[id]}"..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:01
Wolfman-writeup

include "./config.php";   login_chk();   $db = dbconnect();   if(preg_match('/prob|_|\.|\(\)/i', $_GET[pw])) exit("No Hack ~_~");   if(preg_match('/ /i', $_GET[pw])) exit("No whitespace ~_~");   $query = "select id from prob_wolfman where id='guest' and pw='{$_GET[pw]}'";   echo "query : {$query}";   $result = @mysqli_fetch_array(mysqli_query($db,$query));   if($result['id']) echo "Hello {$resul..
WEB_HACKING/los.rubiya.kr 2019. 12. 27. 21:00
Prev 1 ··· 15 16 17 18 19 Next