webeasy

level30

spbctf

Task: extract a flag from a web app where input is used in a SQL LIKE clause. Solution: escape the LIKE pattern with %' then append UNION SELECT to extract the flag from the flags table.

$ ls tags/ techniques/
sql_injectionunion_basedlike_clause
union_based_sqlilike_clause_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]