Back to lessonhackingpath / lab
Capture the FlagMedium

UNION Dump

Lab for SQL Injection: Talking Straight to the Database

Scenario

The item page glues your `id` straight into a SQL query. First prove it's injectable with a stray quote, then append your own SELECT with UNION to read the users table it was never meant to show you.

Objective

Confirm SQL injection, then use a UNION query to dump the users table.

lab ~ union dumpnothing real runs
booting lab sandbox…

This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.