Cronos Write-Up by netsecbrad @FellSEC

Tutorials Writeups
1

I will be publishing 1 write-up per day, based off of TJ Null’s OSCP practice list

2

Nice one - I assume you are prepping for OSCP and if so, good luck!

3

Thanks, yep - !

4

Hello, can u tell me how did u know the page was vulnerable to SQLi ? Thanks

5

Type your comment> @Alphazor said:

Hello, can u tell me how did u know the page was vulnerable to SQLi ? Thanks

It’s more of a convention / standard to just try some basic SQLi against login pages. And since there was no way he had gotten any creds from the enumeration that would probably have been the only way (From intuition, of course.)

6

Type your comment> @PapyrusTheGuru said:

Type your comment> @Alphazor said:

Hello, can u tell me how did u know the page was vulnerable to SQLi ? Thanks

It’s more of a convention / standard to just try some basic SQLi against login pages. And since there was no way he had gotten any creds from the enumeration that would probably have been the only way (From intuition, of course.)

Thanks, this box is learning a tonshit of new things for me :smiley: