WEBVERSE

Loading...

mediumSQL InjectionPro

Stockroom

Coast & Decks built their catalog filter in 2011 and never revisited it. The point-of-sale credentials sit in the same database.

The Scenario

Coast & Decks opened in Long Beach in 2011 with the shop website built

by a friend of the owner's brother, a weekend job to get the deck

catalog online before that season's first big restock. The catalog

filter was wired up that same weekend. The point-of-sale integration

needed somewhere to keep its rotating credentials, "the database" was

the only database the team owned, so that's where they went, alongside

the boards and the trucks and the wax.

Challenge Intel

Synopsis

Coast & Decks' shape filter is concatenated. Use MySQL information_schema to enumerate tables and columns, then pivot a UNION to read a vault_codes row containing the point-of-sale API token.

What It Is

Coast & Decks runs a small online skateboard catalog. The /decks endpoint filters by board shape via a URL parameter, the parameter is spliced directly into an 8-column SELECT. The vault_codes table, used by the point-of-sale system to store rotating credentials, sits in the same database. The teaching focus here is the MySQL information_schema enumeration sequence: list tables with information_schema.tables, list columns with information_schema.columns, then pivot the UNION to extract from the target table.

Who It's For

Players who know the UNION pattern and need practice with MySQL information_schema enumeration (vs sqlite_master).

Skills You'll Practice

  • Identifying MySQL backend via error syntax
  • ORDER BY column-count probing
  • information_schema.tables enumeration (WHERE table_schema=DATABASE())
  • information_schema.columns enumeration
  • Cross-table UNION extraction

What You'll Gain

  • MySQL metadata-enumeration muscle memory
  • Comfort with the table→column→data progression

Ready to hack Stockroom?

Upgrade to Pro to unlock this challenge and the full library.

Stockroom — WebVerse Pro SQL Injection