mission behavoir

[Fors4ken]

Im curious, do these missions set up a semi realistic environment or simply search for a string when doing injections?

For example, missions that require SQL injections; Do these actually communicate with a database with unsanitized input or do they simply search for a proper "SQL injection" string?

[robi_petranovic]

Im curious, do these missions set up a semi realistic environment or simply search for a string when doing injections?

For example, missions that require SQL injections; Do these actually communicate with a database with unsanitized input or do they simply search for a proper "SQL injection" string?

There is probably 2 sql querys, one for a test if you broke, and one which comunicates with a real database.... I hope I'm right?

[TheMindRapist]

I do not think they made built in vulns to the site...
My guess would be it checks your input string against a list of possible answers, then stores that you completed that step of the mission in a cookie.

[Fors4ken]

The reason I ask,

Logically approaching a possible SQL injectin attack requires testing assumptions of what the sql statement looks like in the code. My assumtion seems validated by some input and countered by other input which after a good 30-45 minutes at it, left me feeling like I was searching more for a magical string rather than working towards a solution by a sequence of sql queries each providing additional information to build a proper string required for the attack.

In retrospect it appears this is not in the appropriate forum. My apologies. Please move if needed.

[c24lightning]

It sure as heck doesn't go up against a real DB. For example, if you use certain commands in certain missions, such as basic 8 I believe, it says "If you are trying to use type of command, you're on the right track, but disabled certain queries for security issues." or a similar message. They filter out all vulns, and add what strings *would* have worked.

[comperr]

Most of the missions test for a magical regex string. A regex of all possible working strings. While it may have worked a realistic environment the strings you tried may have actually caused a different flaw, one that can not be tested in a secure envrio.

[blackprince491]

cool to know

[thedotmaster]

Otherwise the site would always be down, compared to usually down