PicoCTF - SQLiLite

22 Sep 2022 picoCTF

Challenge

Can you login to this website?

Launch instance.
Login with random username and password. I use admin as username and xx as password.
Now we know the SQL query command, we can use SQL Injection to exploit it.
Use OR 1=1--' as username and password to login again.
The flag is hidden. So inspect elements to find it.
Here’s flag: picoCTF{L00k5_l1k3_y0u_solv3d_it_9b0a4e21} ٩(^ᴗ^)۶

solidity picoCTF Go ethernaut linux leetcode blockchain array sql react leetcode-top-interview medium typescript smart-contract two-pointer solana javascript java ethereum easy css Linux zsh ubuntu next.js jekyll http hardhat golang ethers docker Secureum Rust web wallet vscode typeorm truffle stack shell rpc notion notes nodejs nextjs mocha html go github git geth filesystem express eslint cloudflare Vim DSA