CodeQL Query
devsecops · medium · +45 XP
Target
GET /api/lab/codeql-101/codebase (6 Python files; 2 contain raw f-string SQL)
POST /api/lab/codeql-101/submit body {query} (mini CodeQL — must match both + no FPs)
Goal: submit a query whose where clause matches execute(f"...") or execute("..." + ...). Mini-engine supports from FunctionCall fc where fc.name = "execute" and fc.arg matches "..." syntax.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/codeql-101/
// reuse on the cli
// submit flag
// no solves yet
4 of 12 · devsecops