{"id":18688773,"url":"https://github.com/noraj/sigsegv1.webserver_7","last_synced_at":"2025-11-08T04:30:29.747Z","repository":{"id":55308016,"uuid":"217930958","full_name":"noraj/SigSegV1.webserver_7","owner":"noraj","description":"A web challenge that was available during SigSegV1 CTF (2018)","archived":false,"fork":false,"pushed_at":"2021-01-05T17:27:49.000Z","size":11079,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-12-28T01:26:23.957Z","etag":null,"topics":["challenge","ctf","rtfm","sigsegv1","sqli","web"],"latest_commit_sha":null,"homepage":"","language":"CSS","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/noraj.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-10-27T23:32:15.000Z","updated_at":"2019-11-02T11:46:44.000Z","dependencies_parsed_at":"2022-08-14T20:22:16.581Z","dependency_job_id":null,"html_url":"https://github.com/noraj/SigSegV1.webserver_7","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/noraj%2FSigSegV1.webserver_7","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/noraj%2FSigSegV1.webserver_7/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/noraj%2FSigSegV1.webserver_7/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/noraj%2FSigSegV1.webserver_7/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/noraj","download_url":"https://codeload.github.com/noraj/SigSegV1.webserver_7/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":239549137,"owners_count":19657534,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["challenge","ctf","rtfm","sigsegv1","sqli","web"],"created_at":"2024-11-07T10:38:19.753Z","updated_at":"2025-11-08T04:30:29.691Z","avatar_url":"https://github.com/noraj.png","language":"CSS","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Boolean-based Blind SQLi with WAF\n\n## Version\n\nDate        | Author                  | Contact               | Version | Comment\n---         | ---                     | ---                   | ---     | ---\n19/11/2018  | noraj (Alexandre ZANNI) | noraj#0833 on discord | 1.0     | Document creation\n\n## Information\n\nInformation displayed for CTF players:\n\n+ **Name of the challenge** / **Nom du challenge**: `Men in black box`\n+ **Category** / **Catégorie**: `Web` / `Web`\n+ **Internet**: not needed\n+ **Difficulty** / **Difficulté**: hard / difficile\n\n### Description\n\nEnglish:\n\n```\nAutomated tools don't prevent manual testing.\n\u003cURL_of_the_server_here\u003e\n```\n\nFrench:\n\n```\nLes outils automatiques n'empêche pas de faire des tests manuels.\n\u003cURL_du_server_ici\u003e\n```\n\n### Hints\n\n- Hint1: sqli\n- Hint2: blacklist = ['ABORT','ACTION','ADD','AFTER','ALL','ALTER','ANALYZE','AND','AS','ASC','ATTACH','AUTOINCREMENT','BEFORE','BEGIN','BETWEEN','BY','CASCADE','CASE','CAST','CHECK','COLLATE','COLUMN','COMMIT','CONFLICT','CONSTRAINT','CREATE','CROSS','CURRENT','CURRENT_DATE','CURRENT_TIME','CURRENT_TIMESTAMP','DATABASE','DEFAULT','DEFERRABLE','DEFERRED','DELETE','DESC','DETACH','DISTINCT','DO','DROP','EACH','ELSE','END','ESCAPE','EXCEPT','EXCLUSIVE','EXISTS','EXPLAIN','FAIL','FILTER','FOLLOWING','FOR','FOREIGN','FROM','FULL','GLOB','GROUP','HAVING','IF','IGNORE','IMMEDIATE','IN','INDEX','INDEXED','INITIALLY','INNER','INSERT','INSTEAD','INTERSECT','INTO','IS','ISNULL','JOIN','KEY','LEFT','LIKE','LIMIT','MATCH','NATURAL','NO','NOT','NOTHING','NOTNULL','NULL','OF','OFFSET','ON','OR','ORDER','OUTER','OVER','PARTITION','PLAN','PRAGMA','PRECEDING','PRIMARY','QUERY','RAISE','RANGE','RECURSIVE','REFERENCES','REGEXP','REINDEX','RELEASE','RENAME','REPLACE','RESTRICT','RIGHT','ROLLBACK','ROW','ROWS','SAVEPOINT','SELECT','SET','TABLE','TEMP','TEMPORARY','THEN','TO','TRANSACTION','TRIGGER','UNBOUNDED','UNION','UNIQUE','UPDATE','USING','VACUUM','VALUES','VIEW','VIRTUAL','WHEN','WHERE','WINDOW','WITH','WITHOUT','abort','action','add','after','all','alter','analyze','and','as','asc','attach','autoincrement','before','begin','between','by','cascade','case','cast','check','collate','column','commit','conflict','constraint','create','cross','current','current_date','current_time','current_timestamp','database','default','deferrable','deferred','delete','desc','detach','distinct','do','drop','each','else','end','escape','except','exclusive','exists','explain','fail','filter','following','for','foreign','from','full','glob','group','having','if','ignore','immediate','in','index','indexed','initially','inner','insert','instead','intersect','into','is','isnull','join','key','left','like','limit','match','natural','no','not','nothing','notnull','null','of','offset','on','or','order','outer','over','partition','plan','pragma','preceding','primary','query','raise','range','recursive','references','regexp','reindex','release','rename','replace','restrict','right','rollback','row','rows','savepoint','select','set','table','temp','temporary','then','to','transaction','trigger','unbounded','union','unique','update','using','vacuum','values','view','virtual','when','where','window','with','without']\n\n## Integration\n\nThis challenge require a Docker Engine and Docker Compose. (Contact author if you plan to use it in another way).\n\nBuilds, (re)creates, starts, and attaches to containers for a service:\n\n```\n$ docker-compose up --build webserver_7\n```\n\nAdd `-d` if you want to detach the container.\n\nThe challenge is using the following images:\n\n- debian:stretch-20180831\n\n## Solving\n\n1. Try some random credentials =\u003e `Wrong credentials!`\n2. `' OR 1=1-- -` =\u003e `Naughty hacker` =\u003e There must be a WAF\n3. `' oR 1=1-- -` =\u003e `Wrong credentials!` =\u003e WAF bypassed but SQLi not triggered\n4. `\" oR 1=1-- -` =\u003e Logged in!\n5. More tests =\u003e blind SQLi\n6. Boolean-based blind SQLi\n7. recon =\u003e get table schema\n8. dump only the right table and column to speed up the process\n9. flag\n\n### Author solution\n\nSee `solve.sh`.\n\n## Flag\n\nFlag: `sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}`\n\n```\n$ printf %s 'sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}' | md5sum\n73a604a180220562deeca0322bc7c34d  -\n\n$ printf %s 'sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}' | sha1sum\n0f09773cbcd9c199608a14e376d81a225d0149af  -\n\n$ printf %s 'sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}' | sha256sum\n510a2b5ca6147bcb69f0ffa1d0b404e3fa392ac319c24e758f27bad7076a52ac  -\n\n$ printf %s 'sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}' | b2sum\n39372a3ee2efe85fb0507b96f6e33fa4bb80a4920b14a9c4f100ad65640cc09eade8995641d3d30f652a45d3836c861eeb320721fb9a81de403f1c44f2b9a724  -\n\n$ printf %s 'sigsegv{N0rAj_d3_MA_SqL1_d3S_Fam1lL3S}' | keccaksum -l\na34a206a5995b2a523a375b5e90be2ed27706a32108cfb98c3827c249e803c648d8ada8135f9e022ca6f19eed3062a1ba603e718e75e28b3b4505852893b2600  -\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnoraj%2Fsigsegv1.webserver_7","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnoraj%2Fsigsegv1.webserver_7","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnoraj%2Fsigsegv1.webserver_7/lists"}