1.13 Lab: Blind SQL injection with out-of-band data exfiltration | 2023
A Simple Writeup is posted on Medium - / cyberw1ng
The application uses a tracking cookie for analytics and performs a SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application's response. However, you can trigger out-of-band interactions with an external domain. The db contains a table called users, with columns username and password. Find out the password of the administrator user | Karthikeyan Nagaraj
#cybersecurity #tryhackme #walkthrough #hacking search for: cyber wing, cyberwing, cyberw1ng, karthikeyan nagaraj