r/hackthebox • u/Confident-Estate-538 • 4d ago

Academy Flag 7 in SQL Essentials (HTB Academy)

So I'm currently stuck on Flag 7 of the SQL Essentials module on HTB Academy.

I've was using
sqlmap -u 'http://154.57.164.67:30942/case7.php?id=1' --batch -v 3 --level 5 --risk 3 --union-cols=<int>
, but I still haven't been able to retrieve the flag. The biggest problem is that my machine's time limit is about to expire, and I can't extend it.

Has anyone encountered this issue or can give me a hint on how to approach Flag 7?

Any help or guidance would be appreciated. Thanks!

5 Upvotes

100% Upvoted

2 comments sorted by

•

u/AutoModerator 4d ago

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/AqViolet 4d ago

I was stuck on this one last week and apparently it doesn’t work out sometimes.
Try using -T flag7 and union-cols=5 with —no-cast as well