Skip to content
/ order Public

ORDER - A small Python web-app to practice blind SQLi in order by

Notifications You must be signed in to change notification settings

bmdyy/order

Repository files navigation

Order

Metadata

  • William Moody
  • 21.03.2021

Description

A small app written in Python (Flask) and PostgreSQL to practice blind SQLi in the ORDER BY clause.

Comes with a dockerfile, so it is easy to set up locally to practice yourself.

A working exploit may be found in /.exploit

How to set up locally

  1. Clone the repo: git clone https://github.com/bmdyy/order
  2. Enter the directory: cd order
  3. Run ./start-docker.sh
  4. Optional: Run ./get-ip-docker.sh to find the container's IP

The app is available at: http://IP:5000/

About

ORDER - A small Python web-app to practice blind SQLi in order by

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published