Hack Forums
[xxx]Sql Challenge - 01 [Easy] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [xxx]Sql Challenge - 01 [Easy] (/showthread.php?tid=5760030)



[xxx]Sql Challenge - 01 [Easy] - pykisback - Nov 29, 2017

Rule: 
Don't harm the site 
Union Based Query 
Display username and password from member table (oops that is too easy) 
PM me query
Code
687474703a2f2f6c6d766e2e636f6d2f74727579656e2f696e6465782e7068703f66756e633d76696577706f73742669643d35444b434455644752335a634733534e7668645859646b714c47467154306b58

[Image: 480173chall.jpg]
Sry For the photo so I used JaNuS18 photo Thanks!!
Good Luck  🎉 🎉 🎉


Solver --
1.JaNuS18
2.S-x-S
3.Berry White


RE: [xxx]Sql Challenge - 01 [Easy] - hi_man - Nov 29, 2017

Which encodding you used ? or i need to crack that too ?


RE: [xxx]Sql Challenge - 01 [Easy] - JaNuS18 - Nov 29, 2017

Thanks  🤝

[Image: 480173chall.jpg]


P.S.
By HF rules personal data should be blured...


RE: [xxx]Sql Challenge - 01 [Easy] - pykisback - Nov 29, 2017

(Nov 29, 2017 05:08 AM)hi_man Wrote:  Which encodding you used ? or i need to crack that too ?

It's hash. Decrypt it no need crack.


RE: [xxx]Sql Challenge - 01 [Easy] - S-x-S - Nov 29, 2017

proof (Click to View)


RE: [xxx]Sql Challenge - 01 [Easy] - Berry White - Nov 29, 2017

[Image: UcGj4Fe.jpg]

Thanks.


RE: [xxx]Sql Challenge - 01 [Easy] - def shock - Nov 29, 2017

(Nov 29, 2017 08:07 AM)pykisback Wrote:  It's hash. Decrypt it no need crack.

It's not a hash. If it was a hash, you wouldn't be able to decrypt it because hashing is a one-way alghoritm.


RE: [xxx]Sql Challenge - 01 [Easy] - pykisback - Nov 29, 2017

(Nov 29, 2017 01:20 PM)def shock Wrote:  It's not a hash. If it was a hash, you wouldn't be able to decrypt it because hashing is a one-way alghoritm.

Sry I mean hex  🤐 🤐 🤦‍♂ 🤦‍♂


RE: [xxx]Sql Challenge - 01 [Easy] - fetepete - Mar 28, 2018

sorry I cant reply with image and I cant pm you
heres my poc
https(://s18.postimg(.)org/dhkr213ah/Screenshot_2018-03-28-20-30-55-90.png


fixed link
https(://s18.(postimg).org/dhkr213ah/Screenshot_2018-03-28-20-30-55-90.png


RE: [xxx]Sql Challenge - 01 [Easy] - CromaS - Mar 28, 2018

hxxp://prntscr[dot]com/ixma7y