Confirmation needed Go to the Training: MySQL II challenge
Global Rank: 55
Totalscore: 253909
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 152d
Last Seen: 5h 32m
The User is Offline
Confirmation needed
Aug 17, 2023 - 08:46:40 (1y 130d)
Aug 17, 2023 - 08:46:40 (1y 130d)
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 227
Totalscore: 94360
Posts: 1684
Thanks: 1360
UpVotes: 920
Registered: 16y 314d
Last Seen: 1d 10h
The User is Offline
RE: Confirmation needed
Aug 17, 2023 - 11:43:37 (1y 130d)
Aug 17, 2023 - 11:43:37 (1y 130d)
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 55
Totalscore: 253909
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 152d
Last Seen: 5h 32m
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 01:32:00 (1y 130d)
Aug 18, 2023 - 01:32:00 (1y 130d)
Quote from gizmoreAug 17, 2023 - 11:43:37
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Hmm... then I don't see what to do.
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 227
Totalscore: 94360
Posts: 1684
Thanks: 1360
UpVotes: 920
Registered: 16y 314d
Last Seen: 1d 10h
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:05:37 (1y 129d)
Aug 18, 2023 - 12:05:37 (1y 129d)
Re-Read my post
In this select, you can select everything what you want.
In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 55
Totalscore: 253909
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 152d
Last Seen: 5h 32m
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:14:43 (1y 129d)
Aug 18, 2023 - 12:14:43 (1y 129d)
Quote from gizmoreAug 18, 2023 - 12:05:37
Re-Read my post
In this select, you can select everything what you want.
The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
tunelko, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 1459 times.
1 people are watching the thread at the moment.
This thread has been viewed 1459 times.