📊 Challenge Overview

Category	Details	Additional Info
🏆 Event	PicoGym	Event Link
🔰 Category	Web	🌐
💎 Points		Out of 500 total
⭐ Difficulty	🟡 Medium	Personal Rating: 0/10
👤 Author	Mubarak Mikail / LT ‘syreal’ Jones	Profile
🎮 Solves (At the time of flag submission)	18.219	solve rate
📅 Date	11-02-2025	PicoGym
🦾 Solved By	mH4ck3r0n3	Team:

📝 Challenge Information

Connect to this PostgreSQL server and find the flag! psql -h saturn.picoctf.net -p 59667 -U postgres pico Password is postgres

🎯 Challenge Files & Infrastructure

Provided Files

1	Files: None

🔍 Initial Analysis

First Steps

The first thing I did was connect to the DB:

1	psql -h saturn.picoctf.net -p 59667 -U postgres pico

for the rest, let’s move on to the exploitation.

🎯 Solution Path

Exploitation Steps

Initial setup

Once connected, I used the \dt command to view all the tables, and I noticed a flags table.

Exploitation

So, by sending the following query:

1	SELECT * FROM flags;

I extracted the entire content of the flags table, where the flag was stored.

Flag capture

🛠️ Exploitation Process

Approach

The exploit connects to the database using psycopg2, exactly as done manually with psql, and executes the query SELECT * FROM flags; to obtain the flag.

1 2	# Dependencies pip install psycopg2

•  Exploit

🚩 Flag Capture

Flag

Proof of Execution

Screenshot of successful exploitation

🔧 Tools Used

Tool	Purpose
Python	Exploit
psql	DB Connection

💡 Key Learnings

New Knowledge

I have learned how to use psql.

Skills Improved

• Binary Exploitation
• Reverse Engineering
• Web Exploitation
• Cryptography
• Forensics
• OSINT
• Miscellaneous

📚 References & Resources

Official Documentation

• https://www.postgresql.org/docs/

📊 Final Statistics

Created: 11-02-2025 • Last Modified: 11-02-2025 *Author: mH4ck3r0n3 • Team: *