SQL injection filter bypass, with no spaces and without calling column name.
An in-depth writeup on Cyber Apocalypse 2023 - The Cursed Mission, Web Exploitation category.
Deserialization attack with Python Bottle.