NahamCon 2022 CTF Write-up: Flaskmetal Alchemist

jack@jacktaylor.tech (Jack Taylor) — Sun, 01 May 2022 10:53:18 +0900

One of the most fun challenges in NahamCon 2022 was Flaskmetal Alchemist. This is a medium web challenge that involves an SQL injection that is relatively easy to spot, but tricky to exploit. I learned a few new things from this, so hopefully this write-up will provide inspiration to all you reading this. In this post I will walk you through my thought process and how I eventually exploited the vulnerability.

NahamCon 2022 on Jack Taylor

NahamCon 2022 CTF Write-up: Flaskmetal Alchemist