Hack Forums
[Challenge] SQL Injection challenge #5 [/Challenge] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Challenge] SQL Injection challenge #5 [/Challenge] (/showthread.php?tid=4087969)



[Challenge] SQL Injection challenge #5 [/Challenge] - -zERAiT - Feb 28, 2014

Hi guys,

I just made a new challenge, hope you guys want to participate.

Target:
Quote:hxxp://www.que[]enhelene.com/haircare_product_detail.php?id=8

*NOTE: Replace "xx" with "tt", remove "[]".

Tasks:
- Display version.
- Display Database name.
- Display User name.
- Display your own name.
- Display tables and number them.
- Display everything in color.

Proof:
Spoiler (Click to View)

Rules:
- Use Union Based SQLI.
- Post picture of proof and send me your syntax.
- Don't share any part of the challenge until it's closed.

Solvers:
Spoiler (Click to View)

Goodluck!🤝



* - Lamer - Feb 28, 2014



No need to send you syntax, Syntax is the same in all your challenges :p

Next time give us something with a WAF :D


* - r0ml4h - Feb 28, 2014

[Image: tPBRy5n.jpg]

The message is . Please enter a message longer than 35 characters.


* - z3r0c0000l - Feb 28, 2014

Thanks for the Challenge.🤝🤝

[Image: krq3ky9.png]

Easy One..🎉🎉


* - Impress. - Feb 28, 2014

Thanks🤝

Spoiler (Click to View)


* - m4rk0n - Feb 28, 2014

Yeah, next time a REAL challenge please!
[img]http://www.anonmgur.com/up/34d4cfdd5c8672dbfce3765a25f06331.jpg[/img]


* - t.pro - Feb 28, 2014

THX for that one (similar to your other).

PROOF:
[IMG]http://s25.postimg.org/xyvidpn3z/image.jpg[/IMG]

cheers!


* - Renegade18 - Feb 28, 2014

[img]http://anonmgur.com/up/64f6820b8c5274150d1334a6e2e97cd0.png[/img]


* - UnChallengeD - Feb 28, 2014

[IMG]http://i1375.photobucket.com/albums/ag468/An_UnChallengeD_TyranT/xx_zps268d3be1.png[/IMG]

thanks


* - -zERAiT - Mar 1, 2014

Thanks for paticipating, updated solvers list.

Besides, these challenge's are not ment for the most of you. I already noticed that most of you can do a good SQL Injection, it's just for the beginnners, your not the only guys here in this section.

Kind Regards🤝