Obtain shomil
’s password hash
Difficulty: Medium
The UnicornBox database uses the following table users
to store its accounts:
CREATE TABLE IF NOT EXISTS users (
username TEXT,
md5_hash TEXT,
-- Additional fields not shown.
);
Your Task: Steal the password hash for user shomil
.
Tips
- Consider looking into the
UNION
keyword to return the result of two queries without usage of a semicolon.