Difficulty
Beginner
Details
This exercise explains how you can from a SQL injection gain access to the administration console. Then in the administration console, how you can run commands on the system. If you didn't go through From SQL injection to shell, you should start there and move to this exercise later.
What you will learn?
- SQL injection exploitation using UNION
- Cracking md5 hashed passwords
- Modifying Apache behavior with .htaccess files
- Writing a PHP webshell
VulnHub