Statistics

73485 Users

52 Donations

Top 10 Players

Last 20 Activities

Online within 1d

WeChall->Challenges->Challenge: Screw SQL

i don't get it... Go to the Screwed Signup challenge

SQL T.*

f1sH

Global Rank: 3260

Totalscore: 6805

Posts: 3

Thanks: 7

UpVotes: 4

Registered: 16y 249d

The User is Offline

i don't get it...
Aug 09, 2010 - 22:15:40 (16y 85d) Google/translate1Thank You!0Good Post!1Bad Post! link

Hello Community,

i stuck on this challenge.

It would be a great hint for me to know if the title means something like "screw the thoughts about sql injection".. Smile

But to be honest i don't have any idea, tried some stupid things but nothing seems to direct to the right way.

So any hint is very welcome. Smile

Have a nice day
f1sH

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 15h

The User is Offline

Send EMail to gizmore

i don't get it...
Aug 09, 2010 - 22:18:42 (16y 85d) Google/translate1Thank You!0Good Post!1Bad Post! link

I am not sure if you are aware of this hint:

It is not only a single bug. Multiple bugs sum up to funny priviledge escalation.
There is a mysql and php/regex bug involved to gain admin level.

The title "Screwsql" is a bit misleading maybe... Hope this post puts you back on track Smile

Happy Challenging!

The geeks shall inherit the properties and methods of object earth.

f1sH

Global Rank: 3260

Totalscore: 6805

Posts: 3

Thanks: 7

UpVotes: 4

Registered: 16y 249d

The User is Offline

i don't get it...
Aug 11, 2010 - 20:25:39 (16y 83d) Google/translate1Thank You!0Good Post!1Bad Post! link

I've got it Smile

thanks for the hint!

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 15h

The User is Offline

Send EMail to gizmore

i don't get it...
Aug 11, 2010 - 21:33:00 (16y 83d) Google/translate1Thank You!0Good Post!1Bad Post! link

You are very welcome Smile

I like to thank you as well, for pointing out that the title is quite misleading.

Also nice that there is finally some hint now ;)

In wechall4 the challenge title will be "Screwed Signup"

The geeks shall inherit the properties and methods of object earth.

esedge, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, f1sH, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 15532 times.