Dr_Wombat
4 years ago

0

Okay, so I understand the premise of the level and how an SQLi works. However, I still need to find a valid username for it to work. So far I’ve tried “admin”, “administrator”, and “visualmaster” from the web robots level on a whim, and none have worked. Are the valid usernames hidden somewhere in the level and I need to find those as well, or am I simply doing my SQLi wrong?

3replies
2voices
223views
Dr_Wombat
4 years ago

0

As a side note, I’ve been performing the injection like so, >> admin'– in the username box, and the password box is then left empty

Kaldah
4 years ago

0

You are just doing SQLi wrong, you don’t need to find a particular username, just bypass security ^^

Dr_Wombat
4 years ago

0

Alright, I’ll keeping looking into it. Thanks.

You must be logged in to reply to this discussion. Login
1 of 4

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss