AliceUsagi

Terminal

Le terminal sert à acceder au contenu de l’ordinateur sans interface graphique. Il sert à :

• manipuler des fichiers

• installer des logiciels

• etc

AliceUsagi

 1191  head -n 20 people
 1192  grep "CLUE" crimescene
 1193  head people
 1194  grep "Annabel" people
 1195  cd
 1196  ls
 1197  cd WILD\ CODE\ SCHOOL/
 1198  ls
 1199  cd UNIX
 1200  ls

AliceUsagi

mysql> SELECT *
    -> FROM wizard
    -> WHERE is_muggle = 0 AND
    -> birthday BETWEEN '1975-01-01' AND '1985-01-01';
+----+-----------+----------+------------+-------------+---------------------------------------+-----------+
| id | firstname | lastname | birthday   | birth_place | biography                             | is_muggle |
+----+-----------+----------+------------+-------------+---------------------------------------+-----------+
|  1 | harry     | potter   | 1980-07-31 | london      |                                       |         0 |
|  2 | hermione  | granger  | 1979-09-19 |             | Friend of Harry Potter                |         0 |
|  4 | ron       | weasley  | 1980-03-01 |             | Best friend of Harry                  |         0 |

AliceUsagi

mysql> SELECT * FROM school;
+----+----------------------------------------------+----------+----------------+
| id | name                                         | capacity | country        |
+----+----------------------------------------------+----------+----------------+
|  1 | Beauxbatons Academy of Magic                 |      550 | France         |
|  5 | Castelobruxo                                 |      380 | Brazil         |
|  6 | Durmstrang Institute                         |      570 | Norway         |
|  7 | Hogwarts School of Witchcraft and Wizardry   |      450 | United Kingdom |
|  8 | Ilvermorny School of Witchcraft and Wizardry |      300 | USA            |
|  9 | Koldovstoretz                                |      125 | Russia         |

AliceUsagi

mysql> SELECT lastname, firstname, role, name FROM player JOIN wizard ON wizard.id=player.wizard_id JOIN team ON team.id=player.team_id ORDER BY name ASC, role ASC, lastname ASC, firstname ASC;
+-----------------+-------------+--------+------------+
| lastname        | firstname   | role   | name       |
+-----------------+-------------+--------+------------+
| Black           | Sirius      | beater | Gryffindor |
| Brown           | Lavender    | beater | Gryffindor |
| Finnigan        | Seamus      | beater | Gryffindor |
| Hagrid          | Rubeus      | beater | Gryffindor |
| Longbottom      | Alice       | beater | Gryffindor |
| McGonagall      | Minerva     | beater | Gryffindor |

AliceUsagi

mysql> SELECT t.name, COUNT(*) AS nb_student 
    -> FROM player p
    -> JOIN team t ON t.id=p.team_id
    -> GROUP BY team_id;
+------------+------------+
| name       | nb_student |
+------------+------------+
| Gryffindor |         36 |
| Ravenclaw  |         15 |
| Slytherin  |         21 |

AliceUsagi

wilder@wilder-ThinkPad-T430:~$ curl -I http://www.google.com
HTTP/1.1 200 OK
Date: Sun, 26 May 2019 20:06:14 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Server: gws
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

AliceUsagi

Solution 1 :
' or 1=1#

Solution 2 :
' || true#

AliceUsagi

https://google-gruyere.appspot.com/GRUYEREINSTANCEID/deletesnippet?index=0

AliceUsagi

1B
2B
3B
4B
5B
6A
7B
8A
9C