Hack Forums
[easy SQLi Challenge #5] by ToOoL - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [easy SQLi Challenge #5] by ToOoL (/showthread.php?tid=4308038)

Pages: Pages 1 2 3

[easy SQLi Challenge #5] by ToOoL - ToOoL - Jun 26, 2014

Hello folks. ToOoL here with another pretty simple exercise for you today 🤝

Target:
Code
aHR0cDovL29sZC5jYWdlcHJpc29uZXJzLmNvbS9hcnRpY2xlcy5waHA/aWQ9MjU2MzI=
Decode the above with Base64

Tasks:
  • Display User

  • Display Your name

  • Display Database name

  • Display a small image of your choice



Proof:
[Image: G9UuahA.png]

Rules:
  • use union select based normal SQLi ONLY, NO TOOLS (no Hajiv, sqlmap, etc etc)

  • post picture as proof and send me your syntax to PM

  • First 5 solvers get credit on the solvers list



Solvers:
  • dotcppfile

  • SPI3DR

  • benzi

  • antonn

  • Corniche

  • Special shoutout to Killu - nice image lol


As alyways, have fun and Goodluck sirs 🎉

* - dotcppfile - Jun 26, 2014

Here you go:
Spoiler (Click to View)

* - -Acid - Jun 26, 2014

There you go:
Spoiler (Click to View)
🤝

* - benzi - Jun 26, 2014

thats regular injection.
[Image: EPq0Ggv.png]

* - antonn - Jun 27, 2014

Big screenshot

This was very easy...

* - Mr_Ratz - Jun 27, 2014

(Jun 27, 2014 12:25 AM)antonn Wrote:  Big screenshot

This was very easy...

Why does ur SS give me a "not found" page?

* - dotcppfile - Jun 27, 2014

(Jun 27, 2014 12:25 AM)antonn Wrote:  Big screenshot

This was very easy...

Wrong thread mate, this isn't what this challenge is about.

* - antonn - Jun 27, 2014

(Jun 27, 2014 06:15 AM)Mr_Ratz Wrote:  Why does ur SS give me a "not found" page?

SS???

(Jun 27, 2014 06:22 AM)dotcppfile Wrote:  Wrong thread mate, this isn't what this challenge is about.

It is. You need to have an image, the db name, the username and your own name. Don't I have that?

* - dotcppfile - Jun 27, 2014

(Jun 27, 2014 08:45 AM)antonn Wrote:  SS???

It is. You need to have an image, the db name, the username and your own name. Don't I have that?

Get the same output that everyone is getting in this thread, enough said.

* - antonn - Jun 27, 2014

(Jun 27, 2014 09:06 AM)dotcppfile Wrote:  Get the same output that everyone is getting in this thread, enough said.

I completed the challenge as stated in the main thread. But specially for you:

[Image: rRYDcCj.png]

* - dotcppfile - Jun 27, 2014

(Jun 27, 2014 09:33 AM)antonn Wrote:  I completed the challenge as stated in the main thread. But specially for you:

[Image: rRYDcCj.png]

Now you completed the challenge.
Much appreciated. Lol.

* - Impress. - Jun 27, 2014

[Image: r4rXiMx.jpg]

thanks🤝

* - Celatix - Jun 27, 2014

Nice, but simple :)

[Image: WKaFVkc.png]

* - themastersinner - Jun 27, 2014

[Image: kjJPJab.png]
🤝

* - Mr_Ratz - Jun 27, 2014

Here you go dude,

My Name : Mr_Ratz
db : cagepris_cms
usern : cagepris_user@localhost

Quote:[img]http://s16.postimg.org/qqgtdk40l/Page_Hack.jpg[/img]


CMIIW, i new to this world 😏