SQLi challenge

[ajkaro]

Target:

hXXp://wXw.tocsa.co.za/product.php?id=4&content_type=products

Task:

• display version with your name on web page
  

Proof:

Rules:

• use union select based SQLi
  
• post picture as proof
  
• send me your syntax
  

Solvers:

-

EDIT: challenge is closed. See links for tutorial how to solve this challenge bellow

Edited May 28, 2013 by ajkaro

[FireKode.]

Target:

hXXp://wXw.tocsa.co.za/product.php?id=4&content_type=products

Task:

• display version with your name on web page
  

Proof:

Rules:

• use union select based SQLi
  
• post picture as proof
  
• send me your syntax
  

Solvers:

-

Link: Theory of Constraints Southern Africa :: Necessary But Not Sufficient :: Management Materials

[ajkaro]

Have you ever heard of Google bot? I made original link with X in URL with intention...

[ajkaro]

You can find tutorial how to solve this challenge here:

http://www.hackforums.net/showthread.php?tid=3509460

or

http://zentrixplus.net/forum/index.php?/topic/983-tutorial-sql-injection-in-where-part/

[xTremeSurfer]

[ajkaro]

Yep, I remember that challenge. Nice one.

Regarding tutorials: it is good people can enjoy so many tutorials and yours is in your language so there is no language barrier for RST users

You should write more tutorials and share your great knowledge...