Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[easy SQLi Challenge #5] by ToOoL

Here you go:
Spoiler (Click to View)
Big screenshot

This was very easy...
(Jun 27, 2014 12:25 AM)antonn Wrote:  Big screenshot

This was very easy...

Why does ur SS give me a "not found" page?
(Jun 27, 2014 12:25 AM)antonn Wrote:  Big screenshot

This was very easy...

Wrong thread mate, this isn't what this challenge is about.
(Jun 27, 2014 06:15 AM)Mr_Ratz Wrote:  Why does ur SS give me a "not found" page?

SS???

(Jun 27, 2014 06:22 AM)dotcppfile Wrote:  Wrong thread mate, this isn't what this challenge is about.

It is. You need to have an image, the db name, the username and your own name. Don't I have that?
(Jun 27, 2014 08:45 AM)antonn Wrote:  SS???

It is. You need to have an image, the db name, the username and your own name. Don't I have that?

Get the same output that everyone is getting in this thread, enough said.
(Jun 27, 2014 09:06 AM)dotcppfile Wrote:  Get the same output that everyone is getting in this thread, enough said.

I completed the challenge as stated in the main thread. But specially for you:

[Image: rRYDcCj.png]
(Jun 27, 2014 09:33 AM)antonn Wrote:  I completed the challenge as stated in the main thread. But specially for you:

[Image: rRYDcCj.png]

Now you completed the challenge.
Much appreciated. Lol.
[Image: r4rXiMx.jpg]

thanks🤝
Here you go dude,

My Name : Mr_Ratz
db : cagepris_cms
usern : cagepris_user@localhost

Quote:[img]http://s16.postimg.org/qqgtdk40l/Page_Hack.jpg[/img]


CMIIW, i new to this world 😏
(Jun 27, 2014 01:16 PM)themastersinner Wrote:  [Image: kjJPJab.png]
🤝

Bro, how to put names ( themastersinner ) like on that pic. I only know user(), database(), and other. Would u tell me the code? Or maybe anyone else know? 😏

Then about the pic, is it photoshop or based on a code/ syntax?
If you want to use costom text then you need to encode your text with a ascii to hex converter. then you can use your custom text like this:

Concat(Database(),0x616563,user())
You dont always have to use hex at all, just in thid website because there's magic quotes. You can also use anything else than Hex but anyways...
Only if its a string injection you can use 'text' in SQL, and mostly you have an int injection and you must use hex.
(Jun 28, 2014 01:09 AM)Mr_Ratz Wrote:  Bro, how to put names ( themastersinner ) like on that pic. I only know user(), database(), and other. Would u tell me the code? Or maybe anyone else know? 😏

Then about the pic, is it photoshop or based on a code/ syntax?

Use concat(0xNameInHexHere

Hope this helped a bit.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER
by Berry WhiteApr 24, 2020 11:08 AM 4 509 Apr 24, 2020 11:08 AM
Last Post: ApertureSecurity