July 2026
Intermediate
729 pages
33h 9m
English
In this challenge, the objective is to exploit a SQL injection vulnerability to list all entries of a Federal Bureau of Investigation (FBI)–style database. The vulnerable web application is reachable at http://10.0.2.29 (see Figure 19.18).
Figure 19.18 FBI-Style Database
It presents an FBI-style database containing criminal records of fictional characters such as Dexter Morgan or Walter White. A search field allows querying the database by name. As a first test, we enter a single quote into the search field (see Figure 19.19).
After submitting the request, the application returns ...
Read now
Unlock full access