ThisisLegal.com

ThisisLegal Forums

Welcome to the forums! A chance for site members to chat and get help.

You are not logged in.

#1 2012-10-08 08:00:31

hcktempesthck
Member
Registered: 2012-10-08
Posts: 4

Realistic Challenge 2

I can't seem to find out if i am closer or further away from the correct SQL injection.

Could someone give a hint?


awesome

Offline

#2 2012-10-09 04:00:52

hcktempesthck
Member
Registered: 2012-10-08
Posts: 4

Re: Realistic Challenge 2

Nvm i solved it.. How long should the password crack take?


awesome

Offline

#3 2012-12-10 07:54:36

maxtor
Member
Registered: 2012-12-03
Posts: 6

Re: Realistic Challenge 2

i just logged in with
username-:admin
password-:1'or'1'='1
and it gives-:"you have got the right idea, dont give up smile"
so wht ahead i should do though i know i have to find hashes but where are they?

Offline

#4 2014-04-17 23:13:56

duraven
Member
Registered: 2014-04-17
Posts: 5

Re: Realistic Challenge 2

Is the challenge working properly? Because when I try the upper details I still get a failure message.

Offline

#5 2014-04-18 12:40:12

Angellic
Member
Registered: 2014-03-14
Posts: 8

Re: Realistic Challenge 2

Yes, it works properly. I have just tried it again and it still works. You are almost there. But you are forgetting a certain part of the password SQL [spoiler]Look in the string terminator sectionhttp://www.thisislegal.com/tutorials/3[/spoiler]

Offline

#6 2014-04-18 13:59:27

duraven
Member
Registered: 2014-04-17
Posts: 5

Re: Realistic Challenge 2

Thanks a lot Angellic.
Because you said the task is working I did a small investigation and it turns out that the button "Enter details then press enter to proceed" is faulty. I mean it gets you to the check page, but it's not submitting the form. If it's a part of the task, putting an order on an active button is the most sneaky thing ever biggrin
Btw. gratz for the author, the challenge is very nice smile

Offline

#7 2014-04-21 12:30:37

Angellic
Member
Registered: 2014-03-14
Posts: 8

Re: Realistic Challenge 2

You are very welcome. If you need more help in the future with this challenge, just message me.

Offline

Board footer

Powered by FluxBB