Challenge Number 7 - Tricky Challenge -

Challenge Number 7 - Tricky Challenge - - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Challenge Number 7 - Tricky Challenge - (/showthread.php?tid=5491860)

Pages: Pages 1 2

Challenge Number 7 - Tricky Challenge - - InjectorBoy - Dec 12, 2016

Hi EveryBody This Is The Challenge Number 7 - Tricky Challenge - Hope You Loved .

# Target #

PHP Code 


<?php 
http://www.ipb-ild.edu.rs/institut.php?id=40 

# Tasks #

part one

make error ' only ' appear in site like me

part two

get all tables with your name in the same page

# Rules #

1- don't change the injection point
2- use union based only
3- pm me your solution

# Proof #

part one

[Image: wZpdDPf.png]

part two

# Solvers #

1- Sir : JaNuS18

* - JaNuS18 - Dec 12, 2016

Error on site, not on white page. I hope I understood that correctly

[Image: 37d03c9c4388c8cf1b857cdc9c226fcf.jpg]

* - InjectorBoy - Dec 12, 2016

(Dec 12, 2016 12:14 PM)JaNuS18 Wrote: Error on site, not on white page. I hope I understood that correctly

thx sir JaNuS18 update thread by your notic sir

can you pm me your solution sir I love to see it

Regards 🤝

* - JaNuS18 - Dec 12, 2016

(Dec 12, 2016 12:39 PM)InjectorBoy Wrote: can you pm me your solution sir I love to see it

Sent. I thought I could drink a coffee first 😝

* - InjectorBoy - Dec 12, 2016

(Dec 12, 2016 12:42 PM)JaNuS18 Wrote: Sent. I thought I could drink a coffee first 😝

🤣

* - JaNuS18 - Dec 12, 2016

Did you try union based on that site?

[Image: 06623b30dfc47ef6740f90af0622db46.jpg]

* - InjectorBoy - Dec 12, 2016

(Dec 12, 2016 01:27 PM)JaNuS18 Wrote: Did you try union based on that site?

are you meaning sir I can bypassing the error :

The used SELECT statements have a different number of columns

and inject by normal way ?

* - JaNuS18 - Dec 12, 2016

(Dec 12, 2016 02:21 PM)InjectorBoy Wrote: are you meaning sir I can bypassing the error :

The used SELECT statements have a different number of columns

and inject by normal way ?

No, I used different link. Try it for exercise. 👍

P.S.
Most links on that site will give you that error.

* - InjectorBoy - Dec 12, 2016

(Dec 12, 2016 02:33 PM)JaNuS18 Wrote: No, I used different link. Try it for exercise. 👍

P.S.
Most links on that site will give you that error.

in this injection point I get column number

but I can't able to appear column number in the site page I will try agian

pm you my query

(Dec 12, 2016 01:27 PM)JaNuS18 Wrote: Did you try union based on that site?

I get it in the same injection point

PHP Code 


<?php 
http://www.ipb-ild.edu.rs/institut.php?id=40 

Regards Sir

* - JaNuS18 - Dec 12, 2016

(Dec 12, 2016 02:46 PM)InjectorBoy Wrote: I get it in the same injection point

👍

Maybe you opened your challenge to soon. Still you can change tasks so also other can go in that direction

P.S.
My invitation to exercise was good for you 😉 Now finish injection point I gave you as another exercise

* - InjectorBoy - Dec 12, 2016

(Dec 12, 2016 03:27 PM)JaNuS18 Wrote: 👍

Maybe you opened your challenge to soon. Still you can change tasks so also other can go in that direction

P.S.
My invitation to exercise was good for you 😉 Now finish injection point I gave you as another exercise

update tasks sir

and thx for exercise sir

* - scorpoin - Dec 25, 2016

I manage to inject it via error based same url but failed to get injection via union , but I mange to get diferent num of colum error message using union. But couldnot get all tables and column. Im nt allowed to pm so I wont sharing my error based but yes I would love to learn this . if you share the solution.

Code 
Duplicate entry 'kamenica_ipb1' for key 'group_key'

Regards
Scorpoin

* - redlightrouter - Dec 26, 2016

Are there any write ups? Would love to read how people do it their way.

* - JeSuis - Dec 27, 2016

i.imgur.com/X3Toabn.png

Sorry, i can t send my syntax because i don t have necessary posts on this forum for this...
Maybe we ll find another way for this and i ll be gad if u cand send me other solutions too

PS: i used id=40 as the injection point
Cheerz

* - scorpoin - Dec 28, 2016

Dear Inj3ct0rBoy We all would love to learn if you could reveal the secret to us . Looking forward to your kind response.

Regards
Scorpoin

solved if you say so I may reveal my syntax here , since there is no activity nor I can send PM .

there is 17 column ;) vuln column is # 2 .

Regards
Socproin