ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › [EASY] *** SQLi challenge for beginners *** [EASY]

New Reply 

[EASY] *** SQLi challenge for beginners *** [EASY]
ajkaro
Guest
 
Sep 30, 2012 02:18 PM
Target:
Spoiler (Click to View)

Task:
display version and your name on screen

Proof:
[img]http://www.anonmgur.com/up/6104dffef89afc674b87caa2f3d34060.jpg[/img]

Rules:
use union select based SQli

Level:
very easy, for beginners

Solvers:
- haczord
- GangJokeR
- pankajborah
- kimsonha
- snyper_x3
- lino08
- UnChallengeD
haczord
Guest
 
Sep 30, 2012 10:12 PM
done
[img]http://s17.postimage.org/khesvygi3/Capture.jpg[/img]
thanks for the challenge 🤝
GangJokeR
Guest
 
Sep 30, 2012 11:09 PM
there is also XSS over that site...
http://www.harsh-light.com/quotationally.../script%3E

solved:
http://ufu.co.il/files/sns1jsri68l1j87ogwuw.jpg
pankajborah
pankajborah Offline
[user@HF:]
*
Registered
Posts:
214
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 1, 2012 12:04 AM
done
[img]http://www.anonmgur.com/up/a5b15688b4148dcedd661bdb59830747.jpg[/img]
sniper_x3
sniper_x3 Offline
[bin@HF:]
*
Registered
Posts:
632
Threads:
39
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 1, 2012 05:55 AM
[Image: XdFEb.png]
it was easy xD
lino08
lino08 Offline
[user@HF:]
*
Registered
Posts:
232
Threads:
39
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 1, 2012 09:21 AM
lol i thought that if you get "The used SELECT statements have a different number of columns" you could only do double query so is there a way to use union based sqli even in those cases?
I managed to do it only with double query, sry...

Spoiler (Click to View)
ajkaro
Guest
 
Oct 1, 2012 11:34 AM
(Oct 1, 2012 09:21 AM)lino08 Wrote:  lol i thought that if you get "The used SELECT statements have a different number of columns" you could only do double query so is there a way to use union based sqli even in those cases?
I managed to do it only with double query, sry...

Spoiler (Click to View)

I don't know what link did you use but regular union select works without problems. I didn't get any "The used SELECT statements have a different number of columns" error.
Blackhawk.
Blackhawk. Offline
[user@HF:]
*
Registered
Posts:
290
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 13, 2013 01:53 PM
Thanks for the challenge :)

[img]http://img15.hostingpics.net/pics/474890untitledcrop.jpg[/img]
zZh4x0rZz
zZh4x0rZz Offline
[closed@HF:]
Posts:
202
Threads:
6
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 13, 2013 03:18 PM
[img]http://img844.imageshack.us/img844/9355/g24p.png[/img]
Thanks for the challenge.
m4rk0n
m4rk0n Offline
[user@HF:]
*
Registered
Posts:
346
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 14, 2013 12:01 PM
[img]http://www.anonmgur.com/up/60f0103b51c5484994439e85773914c7.jpg[/img]
Thanks
MasterBlack
Guest
 
Oct 14, 2013 03:22 PM
Thank you good sir, was my fastest yet.

Spoiler (Click to View)

Anyway, off to complete some coursework, yeah 😭
UnChallengeD
UnChallengeD Offline
[user@HF:]
*
Registered
Posts:
173
Threads:
23
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 1, 2014 04:35 PM
[IMG]http://i1375.photobucket.com/albums/ag468/An_UnChallengeD_TyranT/xx_zps09dac91c.png[/IMG]

thankss
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Byte WizardJul 25, 2024 09:04 AM 0 250 Jul 25, 2024 09:04 AM
Last Post: Byte Wizard
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER