Hack Forums
[free]Version 4 SQLi vuln[/free] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [free]Version 4 SQLi vuln[/free] (/showthread.php?tid=2152302)



[free]Version 4 SQLi vuln[/free] - rand0 - Jan 27, 2012

I have a SQLi vulnerable website that is running version 4. It's an edu website, so it's kinda nice. If anyone wants it, like for practice, just post below and I'll PM the link to you. This is just so I can know who has the link. I'm curious who has skills :)


* - ๖ۣۜVictory - Jan 27, 2012

Wow thats nice ... i am intrested to get the link ^^


* - Pimp my PC - Jan 27, 2012

Can i have the link please , as fast as you can .. maybe ur a cop :D


* - exploringlyfe - Jan 28, 2012

send me buddy i am interested to take that website !


* - rand0 - Jan 29, 2012

Sent to all above. Good luck! I'm curious who's got skills. Enjoy the challenge :)


* - AnoNimTeck - Jan 29, 2012

Can i also get the link please? Thanks in advance ;D


* - rand0 - Jan 29, 2012

Sure, bro. No problemo. I'll PM you the link. It's version 4 though, so good luck! I'll try to find more version 4 vulns to give away soon if I have time.


* - AnoNimTeck - Jan 29, 2012

I tried, but i get an error:
Access denied for user 'acdb2'@'%.siteprotect.com' to database 'information_schema'
After a bit of research i found out that they just disabled the "SELECT" function to public, and there's actually no way to get access to it D:


* - stdape2011 - Jan 29, 2012

if its 4 you wont get information_schema . otherwise the select might be able to be used if bypass the filter


* - infamous_blob - Jan 29, 2012

PM me the link, I need blind SQLi practice.


* - rand0 - Jan 29, 2012

(Jan 29, 2012 02:07 PM)infamous_blob Wrote:  PM me the link, I need blind SQLi practice.

Sure, buddy. no problem. I hope you get the practice you need :)


Also, information_schema is not present, so don't try to inject this like a version 5. This is blind SQLi :)