This contest phase took place between 6^th – 8^th of May 2022 and had 165 active participants (from both Romania and Republica Moldova).

I managed to get the 14^th place, or 10^th place for my category (university). All the official ranks can be found here: https://unbreakable.ro/clasament.
Even though this was the individual phase, I have to congratulate my two teammates (and faculty colleagues), Noria and Toma, who managed to get the 1^st and 2^nd place respectively. GG.

However, even though I had a busy weekend, I still solved 80% of the given challenges. The writeups can be found below.

The main challenge was to find inventive and playful ways to exploit database connected applications that are vulnerable to this kind of attack.

Therefore, I used two applications: one that was entirely coded by me, and the other being a vulnerable webservice hosted on a Linux server. It was fun ( ͡° ͜ʖ ͡°) .

Below is the complete description of the exploitation process / write-up.

The Github repo for this solution can be found here.

The above PDF and video demo can be found here.