How I solved Intigriti's September 2026 challenge: SQLi hiding behind base64

Intigriti monthly challenge 0926 — "Critter Gallery" by @khanhdlq. Solved Sept 21, 2026, ~6h15m after launch. TL;DR The challenge hid a classic UNION-based SQL injection behind a base64-encoded param