Uploaded March 2024 | Updated September 2026, 3 hours ago

---

Tib3rius solves the "KORP Terminal" challenge from the HackTheBox Cyber Apocalypse CTF 2024, using a partially unintended method!

0:00 Introduction
0:37 Attempting basic SQL injection
1:16 Finding SQL error messages
2:45 Extracting data using error based SQL injection
5:55 Extracting the username and password
7:54 Using UNION based injection to deliver a "fake" password to the login
9:05 Solving the challenge and grabbing the flag!
9:48 Explaining why the UNION trick works.
12:41 Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Threads: threads.net/@0xtib3rius
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social