As part of a capture-the-flag assignment, I'm supposed to perform SQL injection using the LIKE clause to obtain the flag. I'm new to this and I've tried the following injections:
(The username required to login is 'admin', so I've performed the following injections in the password field)
'; SELECT password FROM users WHERE username LIKE 'admin%'; --
' OR '1'='1
(I ignored the LIKE clause)
I've also tried variants of (1.) but I'm still stuck.
Is there something I'm missing? Any hints would be appreciated!
PS: I don't have the database schema or table layout