Skip to content

Files

Latest commit

c80c65c · Sep 30, 2018

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
Sep 30, 2018
Sep 30, 2018

The Vault

Points: 250

Category

Web Exploitation

Question

There is a website running at http://2018shell1.picoctf.com:56537 (link). Try to see if you can login!

Hint

No Hints.

Solution

An SQLi challenge where the php code running the query filters out the term OR.

Using LIKE, we can circumvent the filter.

Working solution solve.py

Flag

picoCTF{w3lc0m3_t0_th3_vau1t_c09f30a0}