New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Lab 12 doesn't have the correct hint #21

Closed

AbdelaliLaaguidi opened this issue Mar 2, 2022 · 1 comment

Assignees

Labels

bug has-dependencies

AbdelaliLaaguidi commented Mar 2, 2022 •

edited

i feel like the hint provided in "Lab 12: Command injection - Extracting User Accounts with Command Injection" isn't related to the lab i used sql injection and i found a list of users but none of them are in the list
[11:19:08] [INFO] fetching entries of column(s) 'username' for table 'accounts' in database 'mutillidae'
Database: mutillidae
Table: accounts
[23 entries]
+----------+
| username |
+----------+
| admin |
| adrian |
| john |
| jeremy |
| bryce |
| samurai |
| jim |
| bobby |
| simba |
| dreveil |
| scotty |
| cal |
| john |
| kevin |
| dave |
| patches |
| rocky |
| tim |
| ABaker |
| PPan |
| CHook |
| james |
| ed |
+----------+

Which of these accounts exists on the Mutillidae Linux server?

slack
ntp
george
fred
cmdline

webpwnized self-assigned this

webpwnized added bug has-dependencies labels

Owner

webpwnized commented Mar 3, 2022

Patched in build 2.8.77

webpwnized closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment