Basic Injection
30 points Easy

See if you can leak the whole database using what you know about SQL Injections. link

Don't know where to begin? Check out CTFlearn's SQL Injection Lab

Flag
Rating 4.61
5
4
3
2
1

Discussion

Protected
0
0

This one is easy but due to the output and formatting, people may struggle to do this one properly! The input should 'Be_as_expected' OR 'something_that_is_constant' Rather than: Something_Unexpected' OR 'Due_to_Formatting

0

clueless

0
Protected
0

nice one

0
Protected
0
0

All you have to do is complete the query; don't rewrite it!

0

Hi,

I am able to retrieve table names and column names. Is the flag in one of the table?

It will take forever to check every table.

0

Hi,

Got the solution.

One tip - don't go deep.

0