Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Web-11. SQL Injection into the Employee Portal
Mission
KinoGadget's internal "Employee Access Portal" runs on a legacy authentication system. The lead developer is rumored to build dynamic SQL queries directly from user input — your mission is to see whether you can break in as the administrator.
Not started
Hints
Hint 1Show
The app likely concatenates your input directly into a SQL string
Hint 2Show
A single quote `'` might break the query syntax
Hint 3Show
SQL comments `--` can be used to ignore the rest of the query