SQL Injection 101
Master the fundamentals of broken access control through classic SQL manipulation techniques.
Difficulty
EASY
Reward
100 PTS
Solves
1,248
Challenge Files
Download the source code and local environment to begin your investigation.
MD5: e99a18c428cb38d5f260853678922e03
Overview
An insecure login portal has been detected at the target endpoint. Preliminary intelligence suggests the backend uses a legacy relational database without proper input sanitization.
Objective
Bypass the authentication mechanism to gain access to the admin dashboard. Once inside, retrieve the hidden flag stored in the system configurations.
Technical Clues
- The application is built using Node.js and SQLite3.
- The login query structure appears to be:
SELECT * FROM users WHERE username = '${user}' AND password = '${pass}' - The environment is strictly read-only for standard users.
warning
VULNERABILITY DETECTED
Direct string interpolation in SQL queries allows for logical bypasses using tautologies.