Skip to content

Commit a359f2a

Browse files
author
nginx0
committed
Fix site content
1 parent 216d0fb commit a359f2a

4 files changed

Lines changed: 28 additions & 2 deletions

File tree

_posts/2025-01-14-tryhackme-silver_platter.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,8 @@ Silverpeas up to and including 6.3.4 is vulnerable to a trivial authentication b
119119

120120
E.g. the standard login request will look like this:
121121

122-
```POST /silverpeas/AuthenticationServlet HTTP/2
122+
```
123+
POST /silverpeas/AuthenticationServlet HTTP/2
123124
Host: 212.129.58.88
124125
Content-Length: 28
125126
Origin: https://212.129.58.88
@@ -131,7 +132,8 @@ This will fail login (unless they have forgotten to change the default password)
131132

132133
But if you remove the password field like this:
133134

134-
```POST /silverpeas/AuthenticationServlet HTTP/2
135+
```
136+
POST /silverpeas/AuthenticationServlet HTTP/2
135137
Host: 212.129.58.88
136138
Content-Length: 28
137139
Origin: https://212.129.58.88
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
title: "TryHackMe: Light"
3+
categories: [TryHackMe]
4+
tags: [sql injection]
5+
render_with_liquid: false
6+
img_path: /images/tryhackme_light/
7+
image:
8+
path: banner.png
9+
---
10+
11+
Welcome to the Light database application!
12+
13+
I am working on a database application called Light! Would you like to try it out?
14+
If so, the application is running on port 1337. You can connect to it using nc <MACHINE_IP> 1337
15+
You can use the username smokey in order to get started.
16+
17+
![](room_card.png){: width="300" height="300" .shadow}
18+
_<https://tryhackme.com/r/room/lightroom>_
19+
20+
21+
22+
23+
24+
[payload](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/SQL%20Injection/SQLite%20Injection.md#sqlite-string-methodology)

images/tryhackme_light/banner.png

43.6 KB
Loading
10.7 KB
Loading

0 commit comments

Comments
 (0)