picoCTF Writeup picoGym Practice Challenges SQL Direct Writeup

SQL Direct

AUTHOR: MUBARAK MIKAIL / LT 'SYREAL' JONES

Description
Connect to this PostgreSQL server and find the flag!

ここら辺を入れておく
sudo apt install postgresql postgresql-contrib
sudo apt-get install postgresql-client

$ psql -h saturn.picoctf.net -p 62349 -U postgres pico
Password for user postgres:
psql (12.12 (Ubuntu 12.12-0ubuntu0.20.04.1), server 14.2 (Debian 14.2-1.pgdg110+1))
WARNING: psql major version 12, server major version 14.
         Some psql features might not work.
Type "help" for help.

pico=# select * from pg_tables;
pico=# select * from flags;
 id | firstname | lastname  |                address
----+-----------+-----------+----------------------------------------
  1 | Luke      | Skywalker | picoCTF{L3arN_S0m3_5qL_t0d4Y_31fd14c0}
  2 | Leia      | Organa    | Alderaan
  3 | Han       | Solo      | Corellia
(3 rows)

pico=# 

postgreSQL文を入力すればフラグのテーブルが見つかる。

picoCTF{L3arN_S0m3_5qL_t0d4Y_31fd14c0}