DBaaSadge — Writeup

RealWorld CTF 2021

This year I played the Real World CTF with team Sauercloud and we scored second place. I was involved in solving DBaaSadge, a web challenge, and am happy to share my writeup as a good source of knowledge for other people.

If you want to follow the writeup side-by-side with your own setup, you can find all the challenge files here.

In the challenge, we get a Dockerfile that sets up a Postgres 10 database with two extensions: dblink and mysql_fdw. The first one is an extension by Postgres itself and allows the user to link and connect Postgres databases. The second extension enables the same but with MySQL ..

Support the originator by clicking the read the rest link below.