The goal of this challenge was to get access to a flag stored in the database. The challenge consists of a form with two fields:

• name
• file

The purpose of this application is to read a radar picture of an infractation, apply OCR technology to read the value of the regplate and print all the infractions recorded for it. After a few attempts on passing evil inputs to that form, you might guess that the value of the regplate read by the OCR is vulnerable to SQL injection.