SQLi Cards — Union Injection into SQLite
Union-based SQL injection in a card lookup form to enumerate tables via sqlite_master and extract the flag.
Union-based SQL injection in a card lookup form to enumerate tables via sqlite_master and extract the flag.