[Medium] Sql Injection

[DroG']

O competitie:

- Sintaxele nu se vor face publice, se vor trimite prin PM !

- Postati aici doar un screen-shot ca dovada ca ati rezolvat (fara a se vedea rezolvarea)

Cerere:

- Extrageti tabelele din baza de date.

Vulnerable Parameter:

http://www.bledelesperance.fr/page.php?id=31

Solvers:

- vlad1395

- denjacker

- ghostwhite85

Edited September 19, 2011 by DroG'

[iBebe]

Si tu nu pui un print?

[vlad1395]

PoC

http://img849.imageshack.us/img849/4328/bled2.png

http://img713.imageshack.us/img713/6058/bled1.png

[denjacker]

[Net_Spy]

Where is the challenge it is fuckin basic

Regards

Net_Spy

[denjacker]

Where is the challenge it is fuckin basic

Regards

Net_Spy

The challenge is to get some table_name+from+db.. but it's not that hard.

[Net_Spy]

but for us it isnt that hard or we expect some more challenging . any way those who are in learning phase is good for them to try it out just watch out the " from " . hey den check ur pm on HF.

Regards

Net_Spy

[zovy52]

Nu pot doar pana la versiune...un indiciu ceva ? .

[denjacker]

formezi sintaxa pas cu pas pana cand observi ce anume e blocat.. desi daca erai putin atent tocmai s-a specificat pe aici pe undeva.

[vlad1395]

HINT: hint-ul a fost postat de un "spion al net-ului" .

[Sweby]

Thanks denjacker .

Edited September 19, 2011 by Sweby

[ghostwhite85]

merge...

[oussama.ha]

PoC

http://img849.imageshack.us/img849/4328/bled2.png

http://img713.imageshack.us/img713/6058/bled1.png

pllllllz can you teLL us the liink :O:O