Hack Forums
Spix-|GET mysql username and password|- Challenge - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Spix-|GET mysql username and password|- Challenge (/showthread.php?tid=5946539)

Spix-|GET mysql username and password|- Challenge - Ramb0x - Mar 2, 2019

Hi.

Today i prepared for you a challenge.

Who ever get the config file for this gets +rep from me.

PHP Code

<?php 
http://balade-pierry.fr/ 

TASK: Write down the mysql creds for mysql login here.

SOLVERS:

- K0eN
- Fishsticks
-

Picture of file:

[Image: IPV9ycv.png]

Post it here like that.

Good luck. 🎉

RE: Spix-|GET mysql username and password|- Challenge - Teferi - Mar 2, 2019

Fun challenge, I've send you the solution.

[Image: ezMOBJy.png]

RE: Spix-|GET mysql username and password|- Challenge - Ramb0x - Mar 2, 2019

(Mar 2, 2019 06:13 AM)K0eN Wrote:  Fun challenge, I've send you the solution.

[Image: ezMOBJy.png]

Ok. +rep.

RE: Spix-|GET mysql username and password|- Challenge - Mandango - Mar 2, 2019

(Mar 2, 2019 06:13 AM)K0eN Wrote:  Fun challenge, I've send you the solution.

3 replies is enough dipshit

RE: Spix-|GET mysql username and password|- Challenge - Fishsticks - Mar 2, 2019

Cool challenge, I've got a bunch of files, but still haven't found the right directory, and now I need to take a dump so I'll be back on it later.
Got it, but I can't send PMs or post images, so here's the code:

PHP Code

<?php 
/**
    * Constructeur
    *
    * <p>création de l'instance de la classe. Récupère les paramètres
    * de connexion à la base de données, lance la connexion à la base de
    * données, exécute la requête.</p>
    *
    * @name myConnexion::__construct()
    * @param $query
    * @return void
    */
    public function __construct($query) {
    $myConfig=new myConfig();
        try {
        $myParams=$myConfig->setMyParams("localhost","balladepierry","REDACTED","REDACTED");
        //$myParams=$myConfig->setMyParams("mysql5-7","REDACTED","REDACTED","REDACTED");
        parent::sqlConnect($myParams[0],$myParams[1],$myParams[2],$myParams[3]);
        $this->resultat=parent::query($query);
        }
        catch (MyException $e) {
            echo $e -> getError();
        }
    } 


RE: Spix-|GET mysql username and password|- Challenge - Ramb0x - Mar 2, 2019

Yo, added yo to the list.

RE: Spix-|GET mysql username and password|- Challenge - Fishsticks - Mar 2, 2019

Is this yours? I'm getting carried away and about to persist stuff

RE: Spix-|GET mysql username and password|- Challenge - Ramb0x - Mar 2, 2019

Wut, ofcourse its mine :)