Confirmation needed Go to the Training: MySQL II challenge
Global Rank: 65
Totalscore: 230101
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 119d
Last Seen: 12m 13s
The User is Offline
Confirmation needed
Aug 17, 2023 - 08:46:40 (1y 98d)
Aug 17, 2023 - 08:46:40 (1y 98d)
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 229
Totalscore: 93264
Posts: 1680
Thanks: 1358
UpVotes: 920
Registered: 16y 282d
Last Seen: 12h 44m
The User is Offline
RE: Confirmation needed
Aug 17, 2023 - 11:43:37 (1y 98d)
Aug 17, 2023 - 11:43:37 (1y 98d)
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 65
Totalscore: 230101
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 119d
Last Seen: 12m 13s
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 01:32:00 (1y 98d)
Aug 18, 2023 - 01:32:00 (1y 98d)
Quote from gizmoreAug 17, 2023 - 11:43:37
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Hmm... then I don't see what to do.
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 229
Totalscore: 93264
Posts: 1680
Thanks: 1358
UpVotes: 920
Registered: 16y 282d
Last Seen: 12h 44m
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:05:37 (1y 97d)
Aug 18, 2023 - 12:05:37 (1y 97d)
Re-Read my post
In this select, you can select everything what you want.
In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 65
Totalscore: 230101
Posts: 40
Thanks: 39
UpVotes: 40
Registered: 1y 119d
Last Seen: 12m 13s
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:14:43 (1y 97d)
Aug 18, 2023 - 12:14:43 (1y 97d)
Quote from gizmoreAug 18, 2023 - 12:05:37
Re-Read my post
In this select, you can select everything what you want.
The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
tunelko, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 1401 times.
1 people are watching the thread at the moment.
This thread has been viewed 1401 times.