SQL injection Go to the Training: MySQL II challenge
Global Rank: 3106
Totalscore: 6830
Posts: 3
Thanks: 3
UpVotes: 2
Registered: 8y 362d
Last Seen: 8y 354d
The User is Offline
SQL injection
Jan 05, 2016 - 14:11:49 (8y 356d)
Jan 05, 2016 - 14:11:49 (8y 356d)
I get stuck.
Sensitive is login authentication, so i try to bypass it writing:
CENSORED
or
CENSORED
but the only message I get is wrong password.
Can anybody give me a hint what I'm doing wrong ?
Sensitive is login authentication, so i try to bypass it writing:
CENSORED
or
CENSORED
but the only message I get is wrong password.
Can anybody give me a hint what I'm doing wrong ?
Last edited by dloser - Jan 05, 2016 - 14:59:17
Global Rank: 1
Totalscore: 758910
Posts: 437
Thanks: 497
UpVotes: 470
Registered: 15y 152d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:00:02 (8y 356d)
Jan 05, 2016 - 15:00:02 (8y 356d)
You are ignoring the crucial part of this challenge: the password check.
Global Rank: 3106
Totalscore: 6830
Posts: 3
Thanks: 3
UpVotes: 2
Registered: 8y 362d
Last Seen: 8y 354d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:37:37 (8y 356d)
Jan 05, 2016 - 15:37:37 (8y 356d)
First of all thanks for hint and quick response.
I tried to end SQL command by -- - or -- or %00 and then comment rest of PHP function with multiline comment /*
Injection looks like:
CENSORED
But still getting message about wrong password.
I tried to end SQL command by -- - or -- or %00 and then comment rest of PHP function with multiline comment /*
Injection looks like:
CENSORED
But still getting message about wrong password.
Last edited by dloser - Jan 05, 2016 - 15:42:13
Global Rank: 1
Totalscore: 758910
Posts: 437
Thanks: 497
UpVotes: 470
Registered: 15y 152d
The User is Offline
RE: SQL injection
Jan 05, 2016 - 15:48:02 (8y 356d)
Jan 05, 2016 - 15:48:02 (8y 356d)
You cannot comment out PHP code like that. (And if you could, it still wouldn't work.)
B.t.w.: Don't include the injections you are trying in your posts. It could spoil it for others.
B.t.w.: Don't include the injections you are trying in your posts. It could spoil it for others.
tunelko, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 9654 times.
1 people are watching the thread at the moment.
This thread has been viewed 9654 times.