Dreamhack | sql injection bypass WAF

Exercise: SQL Injection Bypass WAF에서 실습하는 문제입니다. # app.py import os from flask import Flask, request from flask_mysqldb import MySQL app = Flask(__name__) app.config['MYSQL_HOST'] = os.environ.get('MYSQL_HOST', 'localhost') app.config['MYSQL_USER'] = os.environ.get('MYSQL_USER', 'user') app.config['MYSQL_PASSWORD'] = os.environ.get('MYSQL_PASSWORD', 'pass') app.config['MYSQL_DB'] = os.environ.get('MYSQL_DB', 'users') mysql = MySQL(app) template =''' <pre style="font-size:200%">SELECT * FROM user...

원문링크 : Dreamhack | sql injection bypass WAF