webmedium

level32

spbctf

Task: extract a flag from a web app using INSERT-based SQL injection in an email field. Solution: inject a subquery into the INSERT statement via the email field to extract and display the flag from the flags table.

$ ls tags/ techniques/
sql_injectioninsert_injectionsubqueryemail_field
insert_based_sqlisubquery_extractiondata_concatenation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]