[NeverLAN 2019] - SQL FUN 1

Description:

Solution Author:

Lucian Nitescu, as part of jmp 0xc0ffee team.

Solution:

On this challenge, I was provided with a basic and unrestricted SQL "console" that allowed me to enter any SQL query.

As easy as it may sound, I performed a basic select in order to retrieve the user password. Funnily enough, the application requires at least one valid WHERE clause, so I gave it one:

• SELECT * FROM users WHERE 1

The flag is: flag{SQL_F0r_Th3_W1n}