Username: 
Password: 
Restrict session to IP 

Confirmation needed  Go to the Training: MySQL II challenge

Global Rank: 100
Totalscore: 172305
Posts: 31
Thanks: 31
UpVotes: 30
Registered: 305d 20h
cheerfulbull`s Avatar





Last Seen: 5h 42m
The User is Offline
Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
Global Rank: 254
Totalscore: 87264
Posts: 1642
Thanks: 1341
UpVotes: 888
Registered: 16y 103d




Last Seen: 1d 12h
The User is Offline
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 100
Totalscore: 172305
Posts: 31
Thanks: 31
UpVotes: 30
Registered: 305d 20h
cheerfulbull`s Avatar





Last Seen: 5h 42m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 17, 2023 - 11:43:37

You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)


Hmm... then I don't see what to do.

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
Global Rank: 254
Totalscore: 87264
Posts: 1642
Thanks: 1341
UpVotes: 888
Registered: 16y 103d




Last Seen: 1d 12h
The User is Offline
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
Re-Read my post

In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 100
Totalscore: 172305
Posts: 31
Thanks: 31
UpVotes: 30
Registered: 305d 20h
cheerfulbull`s Avatar





Last Seen: 5h 42m
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 18, 2023 - 12:05:37

Re-Read my post

In this select, you can select everything what you want.


The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…

Quote from Mark-Twain

( ͡° ͜ʖ ͡°)
tunelko, Redknee, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, kalungmas have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 915 times.