# Syskron Security CTF 2020 - Leak audit- Write-Up Author: Bon \[[MOCTF](https://www.facebook.com/MOCSCTF)\]
- Flag: 376_mah6geiVoo_21
## **Question:**Leak audit
>Challenge description>We found an old dump of our employee database on the dark net! Please check the database and send us the requested information:1.	How many employee records are in the file?2.	Are there any employees that use the same password? (If true, send us the password for further investigation.)3.	In 2017, we switched to bcrypt to securely store the passwords. How many records are protected with bcrypt?
Flag format: answer1_answer2_answer3 (e.g., 1000_passw0rd_987).
Attachment: [BB-inDu57rY-P0W3R-L34k3r2.tar.gz](./BB-inDu57rY-P0W3R-L34k3r2.tar.gz)
## Write upThis challenge is very straight forward. To test SQL skills.First question:```SELECT count(*) FROM personal;```>Given **376**
Second question:```SELECT count(password) as ct ,passwordFROM personalGroup by password ORDER BY ct DESC  ```
>Given **mah6geiVoo** as its count is 2
Thrid question:```SELECT count(password)FROM personalWHERE password like '%2b%'```
>Given **21**
>So the flag is 376_mah6geiVoo_21