Basic 9

ghost

0 0

18 years ago

I've tried putting SELECT * FROM ****_ in the login.php url but it wont work. I think it has something to do with NUL and /0 or %00 in the SQL query. CAn someone please give me a hint in the right direction

ghost

0 0

18 years ago

You are in the right direction. Do you know how to use the Poison Null Byte attack?

ghost

0 0

18 years ago

A little bit, i dont know where to put the SQL though.

ghost

0 0

18 years ago

…:D

ghost

0 0

18 years ago

I'm still stuck does anyone have any hints as to where i put the 00%