Hack Forums
[SQLI] challenge #8 [SQLI] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [SQLI] challenge #8 [SQLI] (/showthread.php?tid=5490500)

Pages: Pages 1 2

[SQLI] challenge #8 [SQLI] - •^v^–[ bLacKn3x ]–^v^• - Dec 11, 2016

Hey guys,
my last challenge is half year ago. today i give you 2 challenges :)

Difficult: easy

Rules:

Union Based injecti0n onLY
Post Version and your name
Post Proof pic here and PM me solution.
Do not harm the websites!!




Target 1#:http://didaticativa.com/historia_companhia.php?id=216
-get version
-Get admin Name and Pass(don't post full hash, its forbidden)

Target 2#:http://www.zfo.de/index.php?mid=40
-print number of Tables
-print version,databases,
-print all tables
Proof:
[Image: hHbwUv1.png]
[Image: 0ETZKL8.png]

Solver added by 2 solved challenges !
Solver:
JaNuS18

* - JaNuS18 - Dec 11, 2016

Thanks

[Image: 2cc3387ab6df64880182e190a06745bc.jpg]
[Image: 4db4ba0d0d599eacbf0027f726cf35e8.jpg]

* - •^v^–[ bLacKn3x ]–^v^• - Jan 20, 2017

Target2 vuln is fixed.
Now, solve the first for adding to solver :)

Have Fun guys :)

* - MelonToy - Jan 21, 2017

Thanks for the challenge :) new here , hope to see these coming

dump.bitcheese[dot]net/images/gozeviw/NUM1.png

PS: tried to send you my solution but I could not because i have few posts :(

* - •^v^–[ bLacKn3x ]–^v^• - Jan 21, 2017

Nice but,
Please Don't use another parameter or injection point .. i forget to write it on rules..

* - MelonToy - Jan 21, 2017

(Jan 21, 2017 05:00 AM)Blacknex158 Wrote:  Nice but,
Please Don't use another parameter or injection point .. i forget to write it on rules..

well dw , the page is the same , i just used select for 2 , you used it for 3.

* - •^v^–[ bLacKn3x ]–^v^• - Jan 21, 2017

(Jan 21, 2017 05:02 AM)MelonToy Wrote:  well dw , the page is the same , i just used select for 2 , you used it for 3.


Lol no it's not the same -.-
What do yo mean with "i use select for 3 ?"

Simply take the right injection point/parameter and good....

* - MelonToy - Jan 21, 2017

(Jan 21, 2017 05:46 AM)Blacknex158 Wrote:  Lol no it's not the same -.-
What do yo mean with "i use select for 3 ?"

Simply take the right injection point/parameter and good....

Here you go man , look for yourself, it's the same page and i'm using the same var to inject: id
the one you used required only to exit from an href tag but all is the same

pastebin[dot]com/BgZ3wW3x

* - SIM-2793336 - Jan 21, 2017

hi / tnx for your good chall
target 1 : check your Priv8 box
target 2 : down


good luck 🤝

* - •^v^–[ bLacKn3x ]–^v^• - Jan 21, 2017

Okay added to solver : MelonToy
KalamPolo2

Thank you :)

* - Disparity - Jan 21, 2017

[Image: 2d3ff50c4c42dfd33b96b1bc4ef846a2.png]

thanks

* - •^v^–[ bLacKn3x ]–^v^• - Jan 22, 2017

Added Solver : Disparity

Thanks for solving it Bro :))

* - krankenstein - Jan 25, 2017

[Image: j6yBpvP.png]
second one is blocking me and sending me on the footer,patched/secured or not??or am i searching a fallen coin in ocean???
--->
Quote:http://www.zfo.de/footer/rechtliches/mediadaten/



Ich mag immer WAF-Umgehung

* - Disparity - Jan 25, 2017

(Jan 25, 2017 03:39 PM)krankenstein Wrote:  [Image: j6yBpvP.png]
second one is blocking me and sending me on the footer,patched/secured or not??or am i searching a fallen coin in ocean???
--->

Ich mag immer WAF-Umgehung

(Jan 20, 2017 01:25 PM)Blacknex158 Wrote:  Target2 vuln is fixed.
Now, solve the first for adding to solver :)

Have Fun guys :)

It was patched a while after the thread was posted.

RE: [SQLI] challenge #8 [SQLI] - c0re1331 - Nov 4, 2017

hi
this site over firewall protect..!