Shady Oaks Financial - shadyoaks-005

Level: Easy Points: 10 Type: Daily Challenge

Found SQLi in search feature

' or 1=1— -

Using union method, we know number of column to be 8 ' union select 1,2,3,4,5,6,7,8 -- -

Use this resource to find database name, table name, column name and then dump everything that seems interesting PayloadsAllTheThings SQLi Cheatsheet. Or visit checkout the solution of Ottegram for detail step.

After finding necessary datas, we dump the username and password. Password of admin = flag of lab.