Writeup Lord Of SQL Injection: Orc

The Chall Original Link

In this chall, your object is to find the password because i already used many command like ' or 1=1 -- ; and get no response :( . After many times trying, i try Blind SQL Injection and get the thing i want. You will bruteforce to find every character of the password.

I divide this chall into 2 phase:

1. Find the length of the password

2. Find every character of the password

This is my code to solve this problem:

The details explain and the code for this chall available at my Github