![]() |
|
[Easy]SQLi Challenge #1 - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43) +----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103) +----- Thread: [Easy]SQLi Challenge #1 (/showthread.php?tid=4965186) Pages: Pages
1
2
|
[Easy]SQLi Challenge #1 - Baba Yaga - Aug 26, 2015 So this is my first thread on this site. Hope you all enjoy :) Would like to give credit to @Incapability for posting some awesome sites that are vulnerable to SQL injection. Would also like to thank @SiStemiC for the posting layout. This is an easy SQLi challenge: -Firstly decode this hash (base64 encoded): Quote:aHR0cDovL3d3dy5hbnRpcXVlc2luY2FuYWRhLmNvbS9zaG9wLnBocD9teUlEPTQ5Ng== Task: -Write your name next to tables Rules: -Don't destroy the site. -Don't write any links here. -I won't give any hints. It's not that hard... Proof: aHR0cDovL2ltZ3VyLmNvbS85bDNpd3VD (base64 encoded because I can't post pictures/links;too few post count) Solvers Hall of Fame: * - SiStemiC - Aug 27, 2015 Dude, you copied my layout. At least thank me. Thanks for the challenge: Spoiler (Click to View) * - JaNuS18 - Aug 27, 2015 thanks [img]http://img11.hostingpics.net/pics/48748466c2.jpg[/img] * - john12 - Aug 27, 2015 Very easy. ![]() Thanks. * - phammydung - Aug 27, 2015 Thanks for the challenge. Check your inbox. farm6.staticflickr.com/5725/20928440211_4cf618fbd7_o.jpg * - -zERAiT - Aug 27, 2015 ![]() Thank you. * - Baba Yaga - Aug 27, 2015 (Aug 27, 2015 12:22 AM)SiStemiC Wrote: Dude, you copied my layout. At least thank me. Sorry, will edit my post accordingly * - S-x-S - Aug 27, 2015 Proof: mediafire.com/view/56ucd86m6eakyy0/28.PNG * - SiStemiC - Aug 27, 2015 (Aug 27, 2015 08:30 AM)SwagMeister1337 Wrote: Sorry, will edit my post accordingly No problem man, keep making awesome challenges. * - iHeal - Aug 27, 2015 Thanks OP
* - pr0xY_punK - Aug 27, 2015 I've been learning SQLi over the past week, so I'm a bit new to this. I know how to find the Columns and Tables by hand but have not figured out how to add my name next to the Tables. Could someone send me a quick PM on how to do this? Thanks! 😁 * - IDK - Aug 27, 2015 (Aug 27, 2015 04:23 PM)pr0xY_punK Wrote: I've been learning SQLi over the past week, so I'm a bit new to this. I know how to find the Columns and Tables by hand but have not figured out how to add my name next to the Tables. Could someone send me a quick PM on how to do this? Thanks! 😁 Code GROUP_CONCAT(0x526564203a,table_name)0x526564203a = Red : use hackbar to convert your name into hex 🤝 * - JaNuS18 - Aug 27, 2015 (Aug 27, 2015 04:27 PM)Red King Wrote: I suppose you don't want your name as a prefix of every table name, so better to use Concat() for concatenation of two or more strings... 👍 * - IDK - Aug 27, 2015 (Aug 27, 2015 04:36 PM)JaNuS18 Wrote: I suppose you don't want your name as a prefix of every table name, so better to use Concat() for concatenation of two or more strings... 👍 😅😅🎉 (Aug 26, 2015 11:30 PM)SwagMeister1337 Wrote: Task: * - JaNuS18 - Aug 27, 2015 (Aug 27, 2015 04:42 PM)Red King Wrote: 😅😅🎉 Sorry, I am blind (didn't see that request in post) 😊 😵 |