webeasy

Раздача купонов (Coupon Giveaway)

duckerz

Task: Web application with coupon giveaway form vulnerable to SQL injection. Solution: UNION-based SQLite injection to enumerate tables via sqlite_master and extract flag from s3cret table.

$ ls tags/ techniques/
sqlitesql_injectionunion_baseddatabase_enumeration
union_sql_injectionsqlite_master_enumerationcolumn_count_detection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]