Fix blind SQL injection level 1 - #234

Open

r1kka6 wants to merge 1 commit into

OWASP-CTF:dc34-ctffrom

r1kka6:fix/blind-sqli-level-1

r1kka6 commented Aug 10, 2026

Summary

replace Level 1 raw SQL concatenation with the existing prepared-statement pattern
add a regression test proving boolean payloads are bound as data

Verification

./gradlew test --tests org.sasanlabs.service.vulnerability.sqlInjection.BlindSQLInjectionVulnerabilityTest spotlessJavaCheck --no-daemon
./gradlew test spotlessJavaCheck bootJar --no-daemon
runtime replay against /BlindSQLInjectionVulnerability/LEVEL_1: 100 OR 2=2 and 1 AND 1=2 no longer flip the boolean oracle

Challenge

Challenge-7-Blind-SQLi-Level-1


          Fix blind SQL injection level 1

3b3ae31

Signed-off-by: snow <snow@snows-MacBook-Pro-2.local>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet