webeasy
Gondex Dev
spbctf
Task: SQL injection at Gondex Dev search page with flag in hidden table. Solution: Use UNION SELECT with information_schema to enumerate tables, find obfuscated table name, and extract the flag.
$ ls tags/ techniques/
union_based_sqliinformation_schema_enumeration
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]