[Zhen.]

Challenge has two difficulties:

Easy and Medium

Target: http://www.pcez.co.uk

Goal:

For Easy: Get all databases

For Medium: Get the admin username and pass

Proof:
Admin login : http://screensnapr.com/v/nYUoh9.jpg

Users: http://screensnapr.com/v/hsZUES.jpg

Good luck

Solvers:
1.GrickoTheNoob

2.zikmik

3.Razor4x 5_0

4. -Downfall

[Brennanx1]

Can't seem to get the number of columns :P

[zikmik]

[img]http://www.pixshock.net/pic_b/4032dc208534424c56c3fe87174d63a0.png[/img]
and so on, and so on...

[Zhen.]

[img]http://www.pixshock.net/pic_b/4032dc208534424c56c3fe87174d63a0.png[/img]
and so on, and so on...

That's the easiest part if I were to say.

You did get the info using

Code

or 1 group by concat_ws(0x3a,version(),database(),user(),floor(rand(0)*2)) having min(0) or 1

That's not the challenge.
Get the names of the databases and I'll add you to the solvers list

[zikmik]

Is this enough for you?!?

http://www.pcez.co.uk/product.php?prd_id=125

[sBep]

Databases: information_schema, kingpcez_bluebox, kingpcez_pantry, kingpcez_parts, kingpcez_pcez, kingpcez_shop, kingpcez_whm

Admin login: admin:21232f297a57a5a743894a0e4

[Zhen.]

Is this enough for you?!?

http://www.pcez.co.uk/product.php?prd_id=125

facepalm
Control your feelings and stop being a sissy 🤦‍♂

Added you to the solvers list.
Next time, read the instructions rather than solving like a blind person

[MrJoombalaya]

any chance you pm me the solution? 😅

[!!!!]

Hi!
I tried the challenge and found the number of columns with the "String based SQLi" technique but when I use the "Union select" command,it gives 403:Forbidden error!

May I please get the solution to this step?
Thnx! :)

[-DownFall]

Didn't even see this challenge until today lol o.o

Spoiler (Click to View)
Spoiler (Click to View)

Code

information_schema
kingpcez_bluebox
kingpcez_pantry
kingpcez_parts
kingpcez_pcez
kingpcez_shop
kingpcez_whm

[Zhen.]

Didn't even see this challenge until today lol o.o

Spoiler (Click to View)
Spoiler (Click to View)

Code

information_schema
kingpcez_bluebox
kingpcez_pantry
kingpcez_parts
kingpcez_pcez
kingpcez_shop
kingpcez_whm

lol

Send me the syntax nigga
Added to the solver's lsit

[-DownFall]

lol

Send me the syntax nigga
Added to the solver's lsit

My bad :c I forgot lol o.o              

[laxor2307]

I've tried to solve this. I'm not totally new to this, I've tried several methods. All ended in vain. Can Anyone Give me a hint or the syntax? And no I'm not stuck on WAF bypassing. I've also followed ALL -DownFall's guides. Need help.

[watchd0gs]

Can you Pm me
how you did it ?

[andmuchmore]

I am not sure what is more impressive.. You bumping a 6 year old post and expecting an answer or the site that was posted as a challenge is still vuln....