WebMedium

Healthcare Portal SQL Injection

sql-injectionweb-securityowasp

UNG Cybersecurity Faculty

1/15/2025

200 points

Challenge Files

Challenge Instructions

README.txt

💡 Tip: Additional challenge-specific files are located in the assets folder. Check the instructions file for details.

Challenge Overview

Conduct a security assessment of a healthcare web portal. The login system is vulnerable to SQL injection. Bypass authentication, escalate to admin privileges, and retrieve the flag from the database.

Learning Objectives

Apply web analysis techniques
Use professional security tools
Understand real-world attack scenarios
Document findings professionally

Tools You May Need

Burp Suite or OWASP ZAP
sqlmap for automated testing
Browser developer tools

Getting Started

Review the challenge description carefully
Gather and examine all provided materials
Apply systematic analysis methodology
Document your findings as you progress
Submit the flag when discovered

Flag Format

All flags follow the format: ung{descriptive_text}

Good luck!

Hints

💡 Hint 1 (Click to reveal)

Start by examining the basic artifacts and evidence provided

💡 Hint 2 (Click to reveal)

Use industry-standard tools for this type of analysis

💡 Hint 3 (Click to reveal)

The flag follows the format ung{...} with descriptive text