What is it? @.@

Here is the place where I record some tactics about wargame, systems, and other security issues.

2012-10-12

WeChall - Training: MySQL I

Description:

MySQL Authentication Bypass - The classic
This one is the classic mysql injection challenge.
Your mission is easy: Login yourself as admin.
Again you are given the sourcecode, also as highlighted version.

Enjoy!
          __________
Username:|__________|
          __________
Password:|__________|
          Login

Solution:
  1. Use SQL Injection to pass this challenge!
    Username = admin' or '1'='1;
    Password = 1234
  2. Login and it's done!