Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-11. SQL Injection into the Employee Portal
Mission
KinoGadget's internal "Employee Access Portal" runs on a legacy authentication system. The lead developer is rumored to build dynamic SQL queries directly from user input — your mission is to see whether you can break in as the administrator.
Hints
Hint 1 Show
The app likely concatenates your input directly into a SQL string
Hint 2 Show
A single quote `'` might break the query syntax
Hint 3 Show
SQL comments `--` can be used to ignore the rest of the query