Confirmation needed Go to the Training: MySQL II challenge
Global Rank: 33
Totalscore: 331305
Posts: 54
Thanks: 54
UpVotes: 55
Registered: 3y 96d
Last Seen: 113d 11h
The User is Offline
Confirmation needed
Aug 17, 2023 - 08:46:40 (3y 75d)
Aug 17, 2023 - 08:46:40 (3y 75d)
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 14h
The User is Offline
RE: Confirmation needed
Aug 17, 2023 - 11:43:37 (3y 75d)
Aug 17, 2023 - 11:43:37 (3y 75d)
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 33
Totalscore: 331305
Posts: 54
Thanks: 54
UpVotes: 55
Registered: 3y 96d
Last Seen: 113d 11h
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 01:32:00 (3y 74d)
Aug 18, 2023 - 01:32:00 (3y 74d)
Quote from gizmoreAug 17, 2023 - 11:43:37
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.
No spoiler here ;)
Hmm... then I don't see what to do.
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 14h
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:05:37 (3y 74d)
Aug 18, 2023 - 12:05:37 (3y 74d)
Re-Read my post
In this select, you can select everything what you want.
In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 33
Totalscore: 331305
Posts: 54
Thanks: 54
UpVotes: 55
Registered: 3y 96d
Last Seen: 113d 11h
The User is Offline
RE: Confirmation needed
Aug 18, 2023 - 12:14:43 (3y 74d)
Aug 18, 2023 - 12:14:43 (3y 74d)
Quote from gizmoreAug 18, 2023 - 12:05:37
Re-Read my post
In this select, you can select everything what you want.
The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…
Quote from Oscar-Wilde
( ͡° ͜ʖ ͡°)
Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 2617 times.
1 people are watching the thread at the moment.
This thread has been viewed 2617 times.