webeasy

Gabriel

spbctf

Task: SQL injection where only one column is displayed. Solution: UNION SELECT to extract the flag from a different column by substituting the displayed value.

$ ls tags/ techniques/
sqlimysqlunion_select
union_based_sqlicolumn_extraction
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]