LinkedinGithubTryHackMeMedium
Page cover

✅Prioritise TryHackMe Writeup using SQLMap

CTF Writeup / Walkthrough for Prioritise using SQLMap

Prioritise Room

Find the Flag!

Initial Recon

We will use rustscan for port discovery

The following should be the expected output

It looks like there is only a single http server runnning a ToDo application, nothing interesting for us.

Let's head over to the ToDo app!

ToDo Interface

Let's add few items to the list

As you can see, I tried XSS payload and sql injection payload, but there is no success.

Let's use the Sort Option in the application

sort option
Order By Payload

This could be our valid exploitation point, a perfect GET request.

We can now use SQLMap to do the job.

Attack Phase

FIring up SQLMap

We are using SQLMap because we want an automated solution to a Blind SQL Injection, which if you do it manually will take a lot of time

After sometime, running the sqlmap we find a valid payload

Let's check for tables now, since we are using a blind sql injection, we can use threads to make the process faster

Well now we can check for the flag using the following command

We now have the flag!

Happy Hunting 😄 cheers 🍷

Last updated

Was this helpful?