Obtain shomil’s password hash

Difficulty: Medium

[Wiretapped communication from: The control deck.]

Shomil: Hello, my not-suspicious friend Nicholas.
Nicholas: Hello, Shomil. It sure is a great day to not infiltrate the CSA as a spy.
Shomil: Couldn't have said it better myself. Time to log into my computer using my very secure password.
Nicholas: It sure would be a shame if anyone stole that password and used it against the CSA. Hahaha!
Shomil: Hahahahaha!

[Listening to this, you can’t help but wonder how these two were promoted in the organization before you.]

The UnicornBox database uses the following table users to store its accounts:

CREATE TABLE IF NOT EXISTS users (
    username TEXT,
    md5_hash TEXT,
    -- Additional fields not shown.
);

Your Task: Steal the password hash for user shomil.

Tips

  • Consider looking into the UNION keyword to return the result of two queries without usage of a semicolon.