Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-21. Blind Injection in Secure User Search
Mission
This user search app only reports whether a username exists, without showing direct query results. Investigate whether differences in errors or responses can be used to infer hidden information.
Hints
Hint 1 Show
Carefully observe the behavior when searching for a nonexistent user
Hint 2 Show
Try mixing in a subquery whose truth value changes the response (boolean/error-based)
Hint 3 Show
Use whether an error occurs as the oracle for the subquery's truth value