GoGo PowerSQL Writeup (HITCON 2019)
This problem provided us with both a site and a download with a handful of files including a
query binary and a
Starting with the site, it seemed to be a basic search of some kind, though it filters out anything that’s not alphabetic. (For example, searching
1 seems to dump the entire DB.) Nothing particularly useful there.
Next we chose to take a look at that Dockerfile.