Sqlite3
Dojo #26
by YesWeHack
drag_indicator
drag_indicator
drag_indicator
SQLovin - DOJO #26 (Until 01/09/2023)
How to submit your report
- Visit the DOJO program at https://yeswehack.com/programs/dojo
- Click on Submit report
- Login or create your account
- Submit your report
Hint
~ This challenge relies a lot on creativity, SQLite(true+true+true) functions are a big advantage!
GOAL
BRUTE FORCE IS NOT ALLOWED!
The valid solution to the challenge must meet these requirements:
-
perform a SQL injection that changes the email address
CatchMe@gmail.com
toMcLovin@gmail.com
for the fake McLovin user! -
The report MUST include
your payload
and aproof of concept (*image*)
that the email has been changed by your payload.
drag_indicator
INPUT
OUTPUT
drag_indicator
drag_indicator