webmedium

Gondex Beta 2

spbctf

Task: Error-based SQL injection with extractvalue() where flag exceeds 32-char output limit. Solution: Chunked extraction using SUBSTRING() to retrieve flag in parts.

$ ls tags/ techniques/
sqlimysqlsubstringerror_based_sqliextractvaluexpathlong_flag
error_based_sqli_extractvaluexpath_error_injectionchunked_extraction_substring
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]