×-+

WebIntro | CTF Web Exploitation Write Up (SPARTA HMIF ITB 2024)

1 min read

WebIntro | CTF Web Exploitation Write Up (SPARTA HMIF ITB 2024)

Fun fact, this is the starting point of my journey in CTF, thanks to SPARTA. Okay, Let’s begin! In this challenge, we are only given the website . After that, I…

Fun fact, this is the starting point of my journey in CTF, thanks to SPARTA.

 Okay, Let’s begin!

 In this challenge, we are only given the website http://34.50.98.72:9001.

 After that, I used SQL Injection. Essentially, I created a dummy password by converting it to SHA64. I entered the dummy password into the Password field and then the resulting hash (5e884...) into the Username field. This technique tricked the website into thinking it was the real admin password.

 After doing this, I immediately got the flag.


Flag

SPARTA{big_braib_sql_injectionzzzzzzzzzzz}