Hack Forums
SQLI challenge by Spixi. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat β€’ Purple Team β€’ Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLI challenge by Spixi. (/showthread.php?tid=5944049)

Pages: Pages 1 2

SQLI challenge by Spixi. - Ramb0x - Feb 22, 2019

Hello.

Today i was bored so i decided to create a sqli challenge.
The challenge is simple:
- sql inject a given site
- and then post picture like i did

Here is the page link:
http://www.cowboysofcolor.org/profile.php?ID=1

after you get the columns, try to do this:

[Image: 1.png]

Solvers:
- cacaa123
- Haxxxxxxxer
- Zexture
- pid999
First one gets +rep from me.
Happy hacking πŸŽ‰

RE: SQLI challenge by Spixi. - Jackef - Feb 23, 2019

userId firstName lastName userName userStatus password userType
2 Chris Sizemore museumadmin ACTIVE itBGcte711! ADMIN
1 Chris Sizemore tryitagain ACTIVE b76c2b01abbaf0c42a886346fa74d30c123 ADMIN

RE: SQLI challenge by Spixi. - Ramb0x - Feb 23, 2019

(Feb 23, 2019 10:16 AM)Jackef Wrote:  userId firstName lastName userName userStatus password userType
2 Chris Sizemore museumadmin ACTIVE itBGcte711! ADMIN
1 Chris Sizemore tryitagain ACTIVE b76c2b01abbaf0c42a886346fa74d30c123 ADMIN

Can you trigger an XSS and post a picture?

RE: SQLI challenge by Spixi. - cacaa123 - Feb 23, 2019

(Feb 23, 2019 10:17 AM)spix Wrote:  Can you trigger an XSS and post a picture?

look i am elite hacker

[Image: I33dogu.png]

RE: SQLI challenge by Spixi. - Ramb0x - Feb 23, 2019

haha you have so deep neg rep dont even know if its worth it, but like i said +rep.

RE: SQLI challenge by Spixi. - Haxxxxxxxer - Feb 24, 2019

(Feb 22, 2019 07:40 PM)spix Wrote:  Hello.

Today i was bored so i decided to create a sqli challenge.
The challenge is simple:
- sql inject a given site
- and then post picture like i did

Here is the page link:

after you get the columns, try to do this:


Solvers:
- cacaa123
-
-

First one gets +rep from me.
Happy hacking πŸŽ‰

i.imgur.com/Iql2YpC.png

RE: SQLI challenge by Spixi. - Ramb0x - Feb 24, 2019

Ok, man. Added you to the solvers list.

RE: SQLI challenge by Spixi. - Zexture - Feb 24, 2019

(Feb 24, 2019 04:58 AM)spix Wrote:  Ok, man. Added you to the solvers list.

[Image: I9EpLwl.png]

RE: SQLI challenge by Spixi. - pid999 - Feb 25, 2019

i.imgur.com/LXplfNG.png
🀝

RE: SQLI challenge by Spixi. - β€’^v^–[ bLacKn3x ]–^v^β€’ - Feb 9, 2020

thanks for chall...πŸ•΅οΈ

[Image: OzUxdKM.png]


Regards

RE: SQLI challenge by Spixi. - Money- - Feb 10, 2020

[Image: OiAitDh.png]

RE: SQLI challenge by Spixi. - Π’ΠΎΡ…Ρƒ - Feb 17, 2020

[Image: vOqbCe.jpg]

RE: SQLI challenge by Spixi. - frank3nstien - Feb 18, 2020

Here it is............................ 🀯


[Image: 9hIpsag.png]


[Image: 7VF6FKJ.png]

RE: SQLI challenge by Spixi. - vi3tkoo1 - Feb 22, 2020

5.0.96-log Hall of Fame Inductee
1
pp_CoCDB

_ im stuck here T.T , someone can help more ? T.T
+Version : 5.0.96
+DBS : pp_CoCDB

RE: SQLI challenge by Spixi. - 3xploit - Feb 22, 2020

[Image: 6RNiNGp.png]

Wasn't too hard to be honest

and I wonder if /admin is also part of a challenge πŸ™„