Uploaded June 2023 | Updated September 2026, 8 hours ago

---

In this video, Tib3rius (mostly) solves the medium rated "Photo Gallery" challenge from Hacker101 CTF.

0:00 - Introduction
0:20 - Starting Photo Gallery
1:35 - Finding Blind SQL Injection
6:45 - Using SQLmap to confirm the injection
9:15 - Explaining how to identify different database variants
12:16 - Enumerating the database using SQLmap
15:00 - Finding a flag in the database
15:34 - Playing around with the UNION injection some more
22:57 - Finding a flag and source code...finally
24:28 - Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius