[~Rexon]

figured it out someone posted ctf solution thanks

[Poet]

Can you use sql to write files to disk? Try loading a shell and escalate from there.
Is the injection happening on the login? Then you could bypass it, if not you'll need some passwords or session tokens.

[~Rexon]

Can you use sql to write files to disk? Try loading a shell and escalate from there.
Is the injection happening on the login? Then you could bypass it, if not you'll need some passwords or session tokens.

Thank you for the reply bro, I dont think current user has write permissions. And yes the injection is on the login page. Do you know any payloads I can try?

[Poet]

I'd try all the usual ones, what have you tried so far?