webeasy

Kurome

spbctf

Task: find a flag in a database via a search form that queries anime character names. Solution: simply search for "Kurome" (character from Akame ga Kill) — no SQL injection needed, the flag appears in the secret column of the matching record.

$ ls tags/ techniques/
sqlisql_injectionmysqlanimekids
direct_queryno_injection_needed
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]