**WEB Challenge : Ess Kyoo Ell**

**The Callenge Want The admin ip address tjctf{[ip]} .
First I open the Link **


**i see a login form , just put anything and intercept it in** **Brupsuite**


### Just like We See There is No Column Name Password :( , i Tried Some SQL Injection on it **
### But Nothing happen .. a Few Minute Later With Some Union Statement Just Return Some uesful Error
### And I Know Its Sqlite DB**


### From This Error We Know The Column , Know Let us Try To Get Table Name
###

### The Table Name : **users**
###
### Last Query I Send >>

** ' UNION SELECT username,2,3,4,5,6,ip_address FROM users WHERE username LIKE "admin"**

And We Get This


## **FLAG** Is : tjctf{[145.3.1.213]}
##
## Team %00Byte - **Zero**