We covered OverTheWire Natas Level 16 CTF where we went over a blind SQL injection scenario that uses command substitution to bypass character filters. The character filters used preg_match function in PHP to create a blacklist of characters commonly used in SQL Injection. This was part of OverTheWire War Games Natas Level 16
Natas Level 16 Password:
TRD7iZrd5gATjj9OkPEuaOlfEjHqj32V
Video Walkthrough
Show Comments