- William Moody
- 21.03.2021
A small app written in Python (Flask) and PostgreSQL to practice blind SQLi in the ORDER BY clause.
Comes with a dockerfile, so it is easy to set up locally to practice yourself.
A working exploit may be found in /.exploit
- Clone the repo:
git clone https://github.com/bmdyy/order - Enter the directory:
cd order - Run
./start-docker.sh - Optional: Run
./get-ip-docker.shto find the container's IP
The app is available at: http://IP:5000/