SQL Injection Basic (Double Quote)

Authored by Keniver

Description

Points: 50

This is the internal directory system of RiRiLa Company, a common internal system in enterprises, typically backed by a database. You can input an employee's name to query related information. Use this system to practice SQL Injection techniques.

You can observe through real-time previews and the actual syntax executed by the server, gradually piecing together the correct query syntax.

Your goal is to obtain the query result of SELECT flag FROM flag, where the flag content is the answer to this challenge.

Tips

In the database query syntax, there are two ways to represent strings: one is ' and the other is ". You need to guess which method is used in the original query syntax.

Writeups

There is no content at the moment.