Jump to content
yoyois

[Challenge Interactive] SigmaLabs

Recommended Posts

Am inceput sa fac un mic website plin cu challengs care (sper eu) va vor amuza/ajuta sa va dezvoltati un spirit de hacker.

Astept pareri (+ / -), eventuali parteneri etc.

(odata cu zona access2 o sa introduc si un LFI si Advance SQLi) (Sistemul de hint-uri functioneaza).

Three Zero Gamma by FCT

In stagiul actual ar trebui sa continuati pana vedeti textul "to be continue..."

Solvers:

-

Edited by yoyois
Link to comment
Share on other sites

Rezolvat si nivelul 2.

Codul e cam dezorganizat dar se poate rezolva.

Am adaugat un source code disclosure si un SQLi ce trebuie exploatat.

Pentru access III cred ca o sa fac o alta baza de date. Daca aveti sugestii/probleme/ati rezolvat challenge-ul...

PS: Am cam ramas in pana de idei :-S

Link to comment
Share on other sites

M-am uitat putin aseara si ma mai uit si acuma ca tot seara e.

La level am gasit doar atat:

Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /home/u524504470/public_html/level1.php on line 11 Wrong username or password!

Mi-ar prinde bine un hint mai grosolan despre cum sa abordez situatia. Ziceai ceva de o sintaxa in hint. Este vorba de SQLi?

PS: "Drag me around" ?

Link to comment
Share on other sites

Mi-ar prinde bine un hint mai grosolan despre cum sa abordez situatia. Ziceai ceva de o sintaxa in hint. Este vorba de SQLi?

PS: "Drag me around" ?

Drag me around inseamna ca boxu-ul nu e fix cu e draggable.

Cat despre level1. Am spus sa ca se rezolva prin bypass. E ceva de genul SELECT * FROM x where username='$y' and password='$z'

...

if($count==1)

Ai la dispozitie 16 caractere sa faci SQLi bypass. (PS logati-va cu id=1 altfel va impotmoliti)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...