Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Python Automation - SQLite Database Analysis
Mission
data.db is a business SQLite database (users / orders / audit_log). The flag hides in the security_note of the single user with the largest total order amount (SUM(amount)). Use a JOIN and aggregate to find that user and extract the flag.
Hints
Hint 1 Show
Open data.db with Python's sqlite3 module
Hint 2 Show
JOIN orders with users and aggregate SUM(amount) per user_id to find the single top spender (most-orders and largest-single-order users are decoys)
Hint 3 Show
The flag is in that user's audit_log note where action=security_note