jebidiah-anthony

write-ups and what not

Trim_Auth (150 pts)


PART 1 : GETTING THE FLAG

The challenge gives you a link to a web application:

Landing Page

It contains a login form and attempting to login with test : test returns an error message Oops...

Error Message

Maybe the trim in the challenge title pertains to SQL truncation where strings with leading or trailing spaces are used to duplicate unique entries since they are technically different during insertion but the spaces are dropped during query.

Now logging in with a username, ” admin”, with any password returns:

Flag


FLAG : flag{MYSQL_trim_space}