CVE-2021-36393

This repository contains a functional JavaScript-based exploit for CVE-2021-36393, a blind SQL injection vulnerability in Moodle. The exploit leverages bit-shifting techniques to extract sensitive data such as user password hashes, session IDs, and quiz answers.

This repository contains a functional Python exploit for CVE-2021-36393, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit extracts database names, usernames, and password hashes using a time-based blind SQLi technique.