simplify sql

pwncollege · Sep 2, 2024 · 7e332fa · 7e332fa
1 parent 0661b9d
commit 7e332fa
Show file tree

Hide file tree

Showing 12 changed files with 15 additions and 15 deletions.
diff --git a/web-security/auth-bypass-cookie/server b/web-security/auth-bypass-cookie/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/level-10/server b/web-security/level-10/server
@@ -23,8 +23,8 @@ flag = open("/flag").read().strip() if os.getuid() == 0 else "pwn.college{fake_f
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [flag])
+db.execute("""CREATE TABLE posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [flag])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 db.execute("""INSERT INTO users SELECT "hacker" as username, "1337" as password""")

diff --git a/web-security/level-3/server b/web-security/level-3/server
@@ -24,7 +24,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/level-4/server b/web-security/level-4/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [os.urandom(8)])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/level-5/server b/web-security/level-5/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/level-6/server b/web-security/level-6/server
@@ -23,7 +23,7 @@ class TemporaryDB:
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
 user_table = f"users_{random.randrange(2**32, 2**33)}"
-db.execute(f"""CREATE TABLE IF NOT EXISTS {user_table} AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
+db.execute(f"""CREATE TABLE {user_table} AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
 # https://www.sqlite.org/lang_insert.html
 db.execute(f"""INSERT INTO {user_table} SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/level-7/server b/web-security/level-7/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [open("/flag").read()])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 

diff --git a/web-security/sqli-pin/server b/web-security/sqli-pin/server
@@ -22,7 +22,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as pin""", [random.randrange(2**32, 2**63)])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as pin""", [random.randrange(2**32, 2**63)])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, 1337 as pin""")
 

diff --git a/web-security/xss-exfil-cookie/server b/web-security/xss-exfil-cookie/server
@@ -23,8 +23,8 @@ flag = open("/flag").read().strip() if os.geteuid() == 0 else "pwn.college{fake_
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [flag[-10:]])
+db.execute("""CREATE TABLE posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [flag[-10:]])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 db.execute("""INSERT INTO users SELECT "hacker" as username, "1337" as password""")

diff --git a/web-security/xss-rf-post/server b/web-security/xss-rf-post/server
@@ -23,8 +23,8 @@ flag = open("/flag").read().strip() if os.getuid() == 0 else "pwn.college{fake_f
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
-db.execute("""CREATE TABLE IF NOT EXISTS users AS SELECT "admin" AS username, ? as password""", [flag])
+db.execute("""CREATE TABLE posts AS SELECT ? AS content, "admin" AS author, FALSE AS published""", [flag])
+db.execute("""CREATE TABLE users AS SELECT "admin" AS username, ? as password""", [flag])
 # https://www.sqlite.org/lang_insert.html
 db.execute("""INSERT INTO users SELECT "guest" as username, "password" as password""")
 db.execute("""INSERT INTO users SELECT "hacker" as username, "1337" as password""")

diff --git a/web-security/xss-stored-alert/server b/web-security/xss-stored-alert/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS posts AS SELECT "First Post!" AS content""")
+db.execute("""CREATE TABLE posts AS SELECT "First Post!" AS content""")
 
 @app.route("/", methods=["POST"])
 def challenge_post():

diff --git a/web-security/xss-stored-html/server b/web-security/xss-stored-html/server
@@ -21,7 +21,7 @@ class TemporaryDB:
 
 db = TemporaryDB()
 # https://www.sqlite.org/lang_createtable.html
-db.execute("""CREATE TABLE IF NOT EXISTS posts AS SELECT "First Post!" AS content""")
+db.execute("""CREATE TABLE posts AS SELECT "First Post!" AS content""")
 
 @app.route("/", methods=["POST"])
 def challenge_post():