Username: 
Password: 
Restrict session to IP 

Confirmation needed  Go to the Training: MySQL II challenge

Global Rank: 72
Totalscore: 214285
Posts: 38
Thanks: 37
UpVotes: 37
Registered: 1y 106d
cheerfulbull`s Avatar





Last Seen: 1d 23h
The User is Offline
Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
I guessed that I need to try to edit the table to get the hash I want, but my injections always say: Database error in file core/inc/GDO/db/GDO_Database.php line 130.
Can someone confirm if I' doing the right thing, and, if so, what I'm doing wrong?

Quote from Oscar-Wilde

( ͡° ͜ʖ ͡°)
Global Rank: 246
Totalscore: 88161
Posts: 1673
Thanks: 1356
UpVotes: 912
Registered: 16y 269d




Last Seen: 15s
The User is Online
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)
The geeks shall inherit the properties and methods of object earth.
Global Rank: 72
Totalscore: 214285
Posts: 38
Thanks: 37
UpVotes: 37
Registered: 1y 106d
cheerfulbull`s Avatar





Last Seen: 1d 23h
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 17, 2023 - 11:43:37

You cannot inject a second query, like an UPDATE, into this SELECT where you control everything.
Only 1 query per mysql_query() call, it is a security feature.

No spoiler here ;)


Hmm... then I don't see what to do.

Quote from Oscar-Wilde

( ͡° ͜ʖ ͡°)
Global Rank: 246
Totalscore: 88161
Posts: 1673
Thanks: 1356
UpVotes: 912
Registered: 16y 269d




Last Seen: 15s
The User is Online
RE: Confirmation needed
Google/translate0Thank You!0Good Post!0Bad Post! link
Re-Read my post

In this select, you can select everything what you want.
The geeks shall inherit the properties and methods of object earth.
Global Rank: 72
Totalscore: 214285
Posts: 38
Thanks: 37
UpVotes: 37
Registered: 1y 106d
cheerfulbull`s Avatar





Last Seen: 1d 23h
The User is Offline
RE: Confirmation needed
Google/translate1Thank You!1Good Post!0Bad Post! link
Quote from gizmore
Aug 18, 2023 - 12:05:37

Re-Read my post

In this select, you can select everything what you want.


The thing I don’t understand is, it always selects the password, so we’d need to know A password, but we don’t know any…

Quote from Oscar-Wilde

( ͡° ͜ʖ ͡°)
tunelko, Redknee, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 1378 times.