PicoCTF - SQLiLite

22 Sep 2022 picoCTF

Challenge

Can you login to this website?

Launch instance.
Login with random username and password. I use admin as username and xx as password.
Now we know the SQL query command, we can use SQL Injection to exploit it.
Use OR 1=1--' as username and password to login again.
The flag is hidden. So inspect elements to find it.
Here’s flag: picoCTF{L00k5_l1k3_y0u_solv3d_it_9b0a4e21} ٩(^ᴗ^)۶

solidity picoCTF Go ethernaut linux leetcode blockchain sql react leetcode-top-interview array medium typescript smart-contract solana javascript java ethereum easy css Linux zsh ubuntu two-pointer next.js jekyll http hardhat golang ethers Secureum Rust web wallet vscode typeorm truffle stack shell rpc notion notes nodejs nextjs mocha html github git geth express eslint docker cloudflare Vim DSA