Update Payroll_App_Challenge.md

This commit is contained in:
ACIC 2019-06-13 08:23:43 +03:00 committed by GitHub
parent 03de36f901
commit edd484fb46
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,26 +1,33 @@
For this tutorial you will need the following tools<b/> For this tutorial you will need the following tools
* Browser (Prefarably Mozilla) * Browser (Prefarably Mozilla)
* Burpsuite * Burpsuite
* SQLMap * SQLMap
1. Try and login using the following credentials:<b/> 1. Try and login using the following credentials:
| Field | Value | | Field | Value |
| --------- |:--------:| | --------- |:--------:|
| USERNAME | admin | | USERNAME | admin |
| PASSWORD | admin | | PASSWORD | admin |
RESULTS: The webpage will display your username and no content<b/> RESULTS: The webpage will display your username and no content
STEP 1: STEP 1:
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-1.png "STEP 1") ![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-1.png "STEP 1")
RESULTS: RESULTS:
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-1.png "Result 1") ![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-1.png "Result 1")
1. Try and login using the following credentials:<b/> 1. Try and login using the following credentials:
| Field | Value | | Field | Value |
| --------- |:--------:| | --------- |:--------:|
| USERNAME | ' | | USERNAME | ' |
| PASSWORD | admin | | PASSWORD | admin |
RESULTS: The webpage will be blank RESULTS: The webpage will be blank
Inline-style:
STEP 2:
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-2.png "STEP 2") ![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-2.png "STEP 2")