CVE-2021-36396

This repository contains a functional Python exploit for CVE-2021-36396, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit uses a time-based blind SQLi technique to extract database names, usernames, and password hashes from the target system.

This repository contains a functional Python exploit for CVE-2021-36396, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit extracts database names, usernames, and password hashes by leveraging a time-based blind SQLi technique.