Hack Forums
[EASY] *** SQLi challenge for beginners *** [EASY] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [EASY] *** SQLi challenge for beginners *** [EASY] (/showthread.php?tid=2905994)



[EASY] *** SQLi challenge for beginners *** [EASY] - ajkaro - Sep 30, 2012

Target:
Spoiler (Click to View)

Task:
display version and your name on screen

Proof:
[img]http://www.anonmgur.com/up/6104dffef89afc674b87caa2f3d34060.jpg[/img]

Rules:
use union select based SQli

Level:
very easy, for beginners

Solvers:
- haczord
- GangJokeR
- pankajborah
- kimsonha
- snyper_x3
- lino08
- UnChallengeD


* - haczord - Sep 30, 2012

done
[img]http://s17.postimage.org/khesvygi3/Capture.jpg[/img]
thanks for the challenge 🤝


* - GangJokeR - Sep 30, 2012

there is also XSS over that site...
http://www.harsh-light.com/quotationally/index.php?author&author=Fran%3Cscript%3Ealert('h');%3C/script%3E

solved:
http://ufu.co.il/files/sns1jsri68l1j87ogwuw.jpg


* - pankajborah - Oct 1, 2012

done
[img]http://www.anonmgur.com/up/a5b15688b4148dcedd661bdb59830747.jpg[/img]


* - sniper_x3 - Oct 1, 2012

[Image: XdFEb.png]
it was easy xD


* - lino08 - Oct 1, 2012

lol i thought that if you get "The used SELECT statements have a different number of columns" you could only do double query so is there a way to use union based sqli even in those cases?
I managed to do it only with double query, sry...

Spoiler (Click to View)


* - ajkaro - Oct 1, 2012

(Oct 1, 2012 09:21 AM)lino08 Wrote:  lol i thought that if you get "The used SELECT statements have a different number of columns" you could only do double query so is there a way to use union based sqli even in those cases?
I managed to do it only with double query, sry...

Spoiler (Click to View)

I don't know what link did you use but regular union select works without problems. I didn't get any "The used SELECT statements have a different number of columns" error.


* - Blackhawk. - Oct 13, 2013

Thanks for the challenge :)

[img]http://img15.hostingpics.net/pics/474890untitledcrop.jpg[/img]


* - zZh4x0rZz - Oct 13, 2013

[img]http://img844.imageshack.us/img844/9355/g24p.png[/img]
Thanks for the challenge.


* - m4rk0n - Oct 14, 2013

[img]http://www.anonmgur.com/up/60f0103b51c5484994439e85773914c7.jpg[/img]
Thanks


* - MasterBlack - Oct 14, 2013

Thank you good sir, was my fastest yet.

Spoiler (Click to View)

Anyway, off to complete some coursework, yeah 😭


* - UnChallengeD - Mar 1, 2014

[IMG]http://i1375.photobucket.com/albums/ag468/An_UnChallengeD_TyranT/xx_zps09dac91c.png[/IMG]

thankss