https://x3ric.com/blog/tags/sql-injection/CTF notes, systems work, and writeups.Hugoen-usSat, 06 Jun 2026 21:41:13 +0200https://x3ric.com/blog/posts/HackTheBox-baby-sql-Challenge/https://x3ric.com/blog/posts/HackTheBox-baby-sql-Challenge/Fri, 28 Feb 2025 00:20:00 +0800challengehtbwebsql-injectionbaby sql: exploit the SQL injection, extract the needed data, and reach the flag.https://x3ric.com/blog/posts/HackTheBox-sanitize-Challenge/https://x3ric.com/blog/posts/HackTheBox-sanitize-Challenge/Fri, 31 Jan 2025 09:20:00 +0800challengehtbwebsql-injectionsanitize: exploit the SQL injection, extract the needed data, and reach the flag.https://x3ric.com/blog/posts/HackTheBox-Interstellar-Challenge/https://x3ric.com/blog/posts/HackTheBox-Interstellar-Challenge/Fri, 24 Jan 2025 00:20:00 +0800challengehtbwebsql-injectionssrfrcephpEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-Under-Construction-Challenge/https://x3ric.com/blog/posts/HackTheBox-Under-Construction-Challenge/Wed, 22 Jan 2025 09:20:00 +0800challengehtbwebsql-injectionjwtUnder Construction: exploit the SQL injection, extract the needed data, and reach the flag.https://x3ric.com/blog/posts/HackTheBox-Pentest-Notes-Challenge/https://x3ric.com/blog/posts/HackTheBox-Pentest-Notes-Challenge/Thu, 12 Dec 2024 09:20:00 +0800challengehtbwebsql-injectionrceEnter the challenge flag to unlock this writeup.https://x3ric.com/blog/posts/HackTheBox-C.O.P-Challenge/https://x3ric.com/blog/posts/HackTheBox-C.O.P-Challenge/Sat, 30 Nov 2024 09:20:00 +0800challengehtbwebsql-injectiondeserializationrceC.O.P: exploit the SQL injection, extract the needed data, and reach the flag.https://x3ric.com/blog/posts/HackTheBox-KORP-Terminal-Challenge/https://x3ric.com/blog/posts/HackTheBox-KORP-Terminal-Challenge/Sat, 30 Nov 2024 09:20:00 +0800challengehtbwebsql-injectionKORP Terminal: exploit the SQL injection, extract the needed data, and reach the flag.https://x3ric.com/blog/posts/TryHackMe-SQHell-Challenge/https://x3ric.com/blog/posts/TryHackMe-SQHell-Challenge/Fri, 16 Aug 2024 23:20:00 +0800challengethmwebsql-injectionSQHell: exploit the SQL injection, extract the needed data, and reach the flag.