Table of Contents
1. Web App Exploitation 1.1 HTML 1.2 CSS 1.3 JavaScript 1.4 Databases 2. Security Vulnerabilities 2.1 HTML Vulnerabilities 2.2 CSS Vulnerabilities 2.3 JavaScript Vulnerabilities 2.4 Database Vulnerabilities 3. Summary
Challenges
Challenge 1 Challenge 2 Challenge 3
  1. Home
  2. Web App Exploitation
  3. Challenge 3

Challenge 3: SQL (High Difficulty)

For this challenge, you will need to log in again as the site administrator, but this time he changed his password and is now using a SQL database to store his password. Use what you’ve learned so far to login and get the flag.

Hint: the administrator’s username is the same as in the last challenge, only his password has changed.

Sign in

Question 1: Here is an example of what the SQL command used by this login might look like: “SELECT password FROM passwordTable _______ password = userInput”

Fill in the blank with the correct SQL syntax.

Question 1

Challenge 3: Find the flag and input the answer.

Input Flag