English
German
French
Spanish
Albanian
Arabic
Dutch
Bosnian
Serbian
Turkish
Czech
Finnish
Hungarian
Italian
Polish
Russian
Estonian
Urdu
News
Links
Sites
Forum
Ranking
Challenges
Downloads
Register
New Sites
pwn.college
PWN.TN
PromptRiddle
PyDéfis
CryptoHack
247CTF
Énigmes À Thématiques
LordofSQLi
New Users
yaksha
fuzzy9
hacktrullo
felicidad
prlprlp
enekinskywalker
jcesaraguilera
gumel
108 Online
Guest(x86)
,
Adrian83
,
axelquintero
,
B0nk3rZ
,
CainVR
,
Cecilia
,
enekinskywalker
,
felicidad(x2)
,
fuzzy9
,
hacktrullo
,
HvT
,
jcesaraguilera
,
JRobleda
,
livinskull
,
Mortal
,
prlprlp
,
Puntore1992
,
RaulR
,
vulturized
,
Xokage
Signup
Hide Sidebar
Restrict session to IP
Register
Forgot password
Statistics
47 Sites
180 Challs
8874 Posts
66444 Users
41 donations
0 Patreons
1 Shop
47 Active Sites
World of Wargame
WeChall
TheBlackSheep
Rankk
Electrica
NewbieContest
LOST-Chall
Yashira
BrainQuest
Net-Force
HackThisSite
ThisisLegal.com
elhacker.net
TryThis0ne
TDHack
+Ma's Reversing
Hacker.org
HackBBS
Root-Me
SPOJ
Revolution Elite
W3Challs
Gekkó
Webhacking.kr
Reversing.Kr
SuNiNaTaS
Hacking-Challenges
OverTheWire.org
RedTigers Hackit
Defend the Web
Mod-X
Omega Project
ae27ff
pwnable.kr
RingZer0 Team Online CTF
pwnable.tw
Hack The Box
try to decrypt
MysteryTwister
LordofSQLi
Énigmes À Thématiques
247CTF
CryptoHack
PyDéfis
PromptRiddle
PWN.TN
pwn.college
Top 10 Players
dloser
benito255
jusb3
Caesum
tehron
phoenix1204
lordOric
thefinder
Akorlith
Xaav
Last 20 Activities
prlprlp
fuzzy9
hacktrullo
jcesaraguilera
felicidad
yaksha
Orb1t4l
yaksha
ursula
iafaizi
enekinskywalker
Edy
RaulR
Cecilia
hacktrullo
felicidad
axelquintero
NoahMurray
Adrian83
prlprlp
Online within 1d
64 Users
prlprlp
felicidad
Cecilia
enekinskywalker
vulturized
fuzzy9
jcesaraguilera
Puntore1992
HvT
livinskull
axelquintero
B0nk3rZ
JRobleda
Xokage
CainVR
Mortal
RaulR
hacktrullo
Adrian83
deamon9292
more
WeChall
->
Challenges
->
Challenge: Training: MySQL II
SQL injection
Go to the Training: MySQL II challenge
Some enlightenment required
Double query
flaps
Global Rank: 3046
Totalscore: 6823
Posts: 3
Thanks: 3
UpVotes: 2
Registered: 8y 119d
Last Seen: 8y 111d
The User is Offline
SQL injection
Jan 05, 2016 - 14:11:49 (8y 113d)
Google/translate
1
Thank You!
0
Good Post!
1
Bad Post!
link
I get stuck.
Sensitive is login authentication, so i try to bypass it writing:
CENSORED
or
CENSORED
but the only message I get is wrong password.
Can anybody give me a hint what I'm doing wrong ?
Last edited by dloser - Jan 05, 2016 - 14:59:17
dloser
Global Rank: 1
Totalscore: 759879
Posts: 431
Thanks: 491
UpVotes: 456
Registered: 14y 274d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:00:02 (8y 113d)
Google/translate
1
Thank You!
1
Good Post!
0
Bad Post!
link
You are ignoring the crucial part of this challenge: the password check.
flaps
Global Rank: 3046
Totalscore: 6823
Posts: 3
Thanks: 3
UpVotes: 2
Registered: 8y 119d
Last Seen: 8y 111d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:37:37 (8y 113d)
Google/translate
1
Thank You!
1
Good Post!
0
Bad Post!
link
First of all thanks for hint and quick response.
I tried to end SQL command by -- - or -- or %00 and then comment rest of PHP function with multiline comment /*
Injection looks like:
CENSORED
But still getting message about wrong password.
Last edited by dloser - Jan 05, 2016 - 15:42:13
dloser
Global Rank: 1
Totalscore: 759879
Posts: 431
Thanks: 491
UpVotes: 456
Registered: 14y 274d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:48:02 (8y 113d)
Google/translate
1
Thank You!
0
Good Post!
1
Bad Post!
link
You cannot comment out PHP code like that. (And if you could, it still wouldn't work.)
B.t.w.: Don't include the injections you are trying in your posts. It could spoil it for others.
tunelko
,
Redknee
,
silenttrack
,
n0tHappy
,
quangntenemy
,
TheHiveMind
,
Z
,
balicocat
,
Ge0
,
samuraiblanco
,
arraez
,
jcquinterov
,
hophuocthinh
,
alfamen2
,
burhanudinn123
,
Ben_Dover
,
stephanduran89
,
braddie0
,
JanLitwin17
,
SwolloW
,
dangarbri
have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 9082 times.