[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_173":174,"_175":44,"_176":177,"_178":177,"_179":180,"_181":182,"_183":41,"_184":108,"_185":108},"routes/_root/_root",{"_169":-7,"_170":171,"_79":-7,"_172":-7},"routes/_root.tags.$tagCanonical+/_root",{"_102":103,"_17":104,"_105":41,"_106":107},"routes/_root.tags.$tagCanonical+/challenges.$challengeCanonical+/_root",{"_13":14,"_15":16,"_17":18},"challenge",{"_22":23,"_24":25,"_26":27,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":-7,"_43":44,"_45":46,"_47":-7,"_48":-7,"_49":41,"_50":51,"_52":53,"_54":41,"_55":-7,"_56":41,"_57":-7,"_58":-7,"_59":60,"_61":-7,"_62":-7,"_63":-7,"_64":44,"_65":66,"_67":68,"_69":70},"availablePages",[19,20,21],"canonicalUrl","https://alpacahack.com/challenges/xmas-login","Description","Solves","Writeups","name","Xmas Login","canonicalName","xmas-login","solves",375,"flagFormat","Alpaca{...}","categories",[99],"attachments",[94],"remote",{"_91":92,"_93":44},"description","🦙 < There is a vulnerability in this login system! \n🦌 < If you can login as us, we will give you a flag as a present! \n🎅 < Merry Xmas! Hohoho!\n\n

Beginner Hint

\n\n- This challenge is about SQL Injection.\n- If you are not familiar with SQL Injection, let's search the internet.\n\n

\n","descriptionJa","🦙 < このシステムには脆弱性があるパカ！ \n🦌 < 僕たちになりすましてログインできたら、フラグをプレゼントするよ！ \n🎅 < メリークリスマス！ホッホッホッ！ \n\n

初心者向けヒント

\n\n- この問題は SQL インジェクションの脆弱性を利用する問題です。\n- SQL インジェクションについて詳しく知らない場合は、インターネットで調べてみましょう。\n\n

\n","descriptionRequiresSignIn",false,"changeLog","isArchived",true,"authors",[87],"solvedAt","solvedAtInContext","likedByViewer","ctfChallenges",[],"tags",[81,82],"submitAsCtfChallenge","ctfCanonical","ctfEnded","point","solvesCtfChallenge","classification","easy","isMirror","ctfParticipants","ctfMode","isDailyChallenge","dailyChallengeSlot",{"_71":72,"_59":60,"_73":74,"_75":76},"nextDailyCanonical","useful-machine","httpsProxyHostname","xmas-login.chal.alp4ca.com","program",{"_24":77,"_22":78,"_79":80},"scheduledDate",["D",1766588400000],"plannedTopic","SQL","daily-alpacahack","Daily AlpacaHack","timeZone","Asia/Tokyo",{"_22":85,"_24":86},{"_22":83,"_24":84},"SQL Injection","sql-injection","Authentication Bypass","authentication-bypass",{"_22":88,"_89":90},"hiikunz","gravatarHash","8c0f0a659c491490d814a033d4b13ee8a8af53e5a50f36aff3f5c7f404a4c1f8","instances",[],"canSpawn",{"_95":96,"_97":98},"fileName","xmas-login.tar.gz","url","https://alpacahack-prod.s3.ap-northeast-1.amazonaws.com/fe8823bd-46ec-4f76-b37e-3ae66a9f9e53/xmas-login.tar.gz",{"_22":100,"_24":101},"Web","web","title","Tag: SQL Injection","https://alpacahack.com/tags/sql-injection","isLoggedIn","tag",{"_22":83,"_24":84,"_36":108,"_38":108,"_45":109,"_110":111,"_112":113,"_114":115},"",[],"updatedAt",["D",1776995857087],"challenges",[116,117,118,119,120],"relatedTags",[],{"_22":160,"_24":161,"_26":162,"_52":163,"_45":164,"_30":165,"_47":-7},{"_22":23,"_24":25,"_26":27,"_52":153,"_45":154,"_30":155,"_47":-7},{"_22":143,"_24":143,"_26":144,"_52":145,"_45":146,"_30":147,"_47":-7},{"_22":129,"_24":130,"_26":131,"_52":132,"_45":133,"_30":134,"_47":-7},{"_22":121,"_24":121,"_26":122,"_52":123,"_45":124,"_30":125,"_47":-7},"secret-table-2",119,[128],[127],[126],{"_22":100,"_24":101},{"_22":88,"_89":90},{"_22":83,"_24":84},"Country DB","country-db",225,[139,140],[136],[135],{"_22":100,"_24":101},{"_22":137,"_89":138},"ptr-yudai","329c13332736e97decec505f5918236c2c8d476d724076661539bbf1cae11db9",{"_22":141,"_24":142},{"_22":83,"_24":84},"JSON","json","secret-table",282,[152],[149],[148],{"_22":100,"_24":101},{"_22":150,"_89":151},"ark","167e139e6b5704c655704c007bc3fd8f4bee6636ad40ec2ef61e5563e7219536",{"_22":83,"_24":84},[158,159],[157],[156],{"_22":100,"_24":101},{"_22":88,"_89":90},{"_22":85,"_24":86},{"_22":83,"_24":84},"Simple Login","simple-login",628,[168],[167],[166],{"_22":100,"_24":101},{"_22":150,"_89":151},{"_22":83,"_24":84},"user","language","en","timeZoneAbbr","firebaseOptions",{"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":180},"isVercel","env","production","envName","gaTrackingId","G-FJX5L5Y9FE","turnstileSiteKey","0x4AAAAAAAfYTP7SUci3nVKW","isSpawnerUnderMaintenance","spawnerMaintenanceNotice","cspNonce","apiKey","AIzaSyDGInmUCFubPOqJWQCw3LBB-XZGj9LX4l4","appId","1:691353492123:web:4ae258ec8c620e63f0443e","projectId","alpacahack","authDomain","alpacahack.firebaseapp.com","messagingSenderId","691353492123","measurementId"]

SQL Injection

SQL Injection Challenges

Simple Login

Xmas Login

secret-table

Country DB

secret-table-2

Xmas Login