LEVEL 4

narrow Date

web

666

Description
Writeups 9
Difficulty votes 19
Questions 3
Solvers 85
Comments 3

This challenge is from 제8회 BoB 정보보안 CTF(BISC) .

Description

(주)me2nuk 회사의 관리자 데이터를 안전하게 보호할 수 있는 회원 정보 viewer 서비스를 개발 했습니다!

아직은 Prototype 단계로 진행 중에 있기 때문에 많은 기능이 있지는 않지만 저희는 시큐어 코딩을 먼저 했기 때문에 끄떡 없스무니다

[언인텐 수정] - 2022.11.04
[언인텐 수정] - 2022.11.10
[언인텐 수정] - 2022.11.19
[기능 수정] - 2022.11.27

Author

워게임: 20

2022.09.07. 13:00:00

First Blood!

워게임: 50

Solved in just 2 months!

Difficulty votes 19

Full voting log

워게임: 50

Has voted on this challenge to LEVEL 4.

3 months ago

No badge

Has voted on this challenge to LEVEL 4.

4 months ago

스쿼드

Has voted on this challenge to LEVEL 4.

5 months ago

웹해킹 입문

Has voted on this challenge to LEVEL 5.

6 months ago

No badge

Has voted on this challenge to LEVEL 4.

6 months ago

Questions 3

Need help? Ask your question and get hints!

Ask Questions

How do I solve this lol

I don't know if using sql injection is the right thing to do... It's been a few hours, I don't know lol

Isn't what's in the comment a flag...

Why is that not an answer? I extracted a BISC {} format flag from Comment...

The injection was successful by loosening the WAF test to “email” in `/home.php', but I don't have a sense of how to proceed later. Since waf doesn't filter regdate, I think the flag can be extracted with regdate, but... Unfortunately, it didn't work out. Give me a hint/direction of progress

No badge

4 days ago

세계수

1 month ago

공부벌레

2 months ago

No badge

3 months ago

워게임: 50

3 months ago

No badge

4 months ago

No badge

4 months ago

No badge

4 months ago

No badge

5 months ago

No badge

5 months ago

Comments 3

No badge

4 months ago

글을 똑바로 읽자 허헣

No badge

1 year ago

Good

2024 Invitational Contenders

2 years ago

ㄷㄷ

narrow Date

Description

Author

First Blood!

Difficulty votes 19

Questions 3

Solvers 85

Comments 3