All Questions
2 questions
2
votes
3
answers
318
views
Trouble understand login vulnerabilities
I'm testing my own web page with the following vulnerabilities.
#1:
Form escapes ' to \'
So if a user tries to enter the following information:
username: 'or'1=1
password: m
username will ...
0
votes
2
answers
2k
views
How to retrieve the admin's password of a webapp?
I'm doing a pentesting example on a web app and I have dumped all the database.
I have a table with the users in plaintext and the passwords hashed.
I have to find the admin's password (I know that ...