**WEB Challenge : Ess Kyoo Ell**![](https://s33.postimg.cc/84vft30bj/pic1.png)
**The Callenge Want The admin ip address tjctf{[ip]} .First I open the Link **
![](https://s33.postimg.cc/ndld7erl7/pic2.png)
**i see a login form , just put anything and intercept it in** **Brupsuite**
![](https://preview.ibb.co/kwr9vp/pic3.png)
### Just like We See There is No Column Name Password :( , i Tried Some SQL Injection on it **### But Nothing happen .. a Few Minute Later With Some Union Statement Just Return Some uesful Error ### And I Know Its Sqlite DB**
![](https://preview.ibb.co/iXmngU/pic4.png)
### From This Error We Know The Column , Know Let us Try To Get Table Name ### ![](https://preview.ibb.co/n3opvp/pic5.png)
### The Table Name : **users**### ### Last Query I Send >>
** ' UNION SELECT username,2,3,4,5,6,ip_address FROM users WHERE username LIKE "admin"**
And We Get This 
![](https://preview.ibb.co/hoJxFp/pic6.png)
## **FLAG** Is :  tjctf{[145.3.1.213]}## ## Team %00Byte - **Zero** 
