Category: Web
Writeup:
We are provided the following url http://fun.ritsec.club:8005/ .The website has the functionality to fetch the records of ship which contains 3 columns. Certainly, a very CTF-ish way to promote players to focus on SQL Injection.
Without further day, we can place '=''or' which will list all the data, including the flag. That was quick and a first blood