A small Flask site that shows pages from a SQLite database. The page id taken from the URL path is concatenated into the SQL query.
Not startedDockercommit 85a645ex86_64 · aarch64Secret
Use a UNION-based SQL injection in the page id to read data from other tables of the database, such as the users' credentials.
The brief for this lab lives in its repository.