HTB registration link: https://referral.hackthebox.com/mzy3zVi
1. Use a Union injection to get the result of 'user()'
2. What is the password hash for 'newuser' stored in the 'users' table in the 'ilfreight' database?
3.We see in the above PHP code that '$conn' is not defined, so it must be imported using the PHP include command. Check the imported page to obtain the database password.
4. Find the flag by using a webshell.