PicoCTF - SQLiLite
22 Sep 2022picoCTF Challenge
Tags
PicoCTF 2022 / Web Exploitation / sql
Description
Can you login to this website?
Writeup
- Launch instance.
- Login with random username and password. I use
adminas username andxxas password.
- Now we know the SQL query command, we can use SQL Injection to exploit it.
- Use
OR 1=1--'as username and password to login again.
- The flag is hidden. So inspect elements to find it.
- Here’s flag:
picoCTF{L00k5_l1k3_y0u_solv3d_it_9b0a4e21}٩(^ᴗ^)۶