class TMoodleActions::SqlInjection

Defined in:

actions/SqlInjection.cr

Instance Method Summary

Instance Method Detail

def execute(url, moodle_session, sess_key, table = "config", row_id = 25, column = "value", value : Number | String = 3) #

[View source]
def get_user_id(url, moodle_session) #

[View source]
def perform(url) #

Get your sesskey, moodle session, and user id first: Login to moodle and type this in the address bar (Chrome will not let you paste): javascript: Then paste this: alert("MoodleSession: " + document.cookie.match(new RegExp('(^| )MoodleSession=([^;]+)'))[2] + "\nSessKey: " + M.cfg.sesskey + "\nUser id: " + document.querySelectorAll('[data-userid]')[0].getAttribute("data-userid")) Or paste it into the Dev Tools console.


[View source]