Marown/metasploitable3-solutions
1
0
Fork 0
mirror of https://github.com/ACIC-Africa/metasploitable3.git synced 2024-06-01 20:15:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update Payroll_App_Challenge.md

Browse Source
This commit is contained in:
ACIC 2019-06-13 08:28:04 +03:00 committed by GitHub
parent e5c1496f78
commit 46146d29c5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Payroll_App_Challenge.md
View File

@ -16,7 +16,7 @@ RESULTS: The webpage will display your username and no content
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-1.png "STEP 1")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-1.png "Result 1")
2. Try and login using the following credentials:<b/>
2. <b>Try and login using the following credentials:</b>
| Field | Value |
| --------- |:--------:|
@ -26,3 +26,16 @@ RESULTS: The webpage will display your username and no content
RESULTS: The webpage will be blank
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-2.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-2.png "RESULT 2")
2. <b>Try and login using the following credentials:</b>
| Field | Value |
| --------- |:--------:|
| USERNAME | ' |
| PASSWORD | admin |
RESULTS: The web page will return all the user content
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-3.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-3.png "RESULT 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-4-sqlmap.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-4-1.png "RESULT 2")