Join us at IRC!
Never in the field of human conflict was so much owed by so many to so few. - Winston Churchill
Wednesday, May 23, 2012
Navigation
Members Online
Total Online: 38
Web Spiders: 16
Guests Online: 33
Members Online: 5

Registered Members: 70162
Newest Member: Windows-2012
Latest Articles
View Thread

HellBound Hackers | Challenges | Basic

Author

basic 21, my sql code should extract the password

thebarkeeper
Member

Posts: 5
Location:
Joined: 07.05.09
Rank:
Mad User
Posted on 22-04-10 23:18
I can extract the username, so it is printed out in an error message. When I replace the name of the username column, with the name of the password column, it doesnt error. Which it should have, just like when the username got printed out.

Got any hints for me? :)
Author

RE: the whitepaper has moved...

C4741ysT
Member

Posts: 2
Location:
Joined: 01.01.11
Rank:
Monster
Posted on 09-02-11 21:13
the paper that is essential to completing this mission has been moved/retitled: http://www.nccgroup.com/Libraries/document_Downloads/Advanced_SQL_Injection_in_SQL_Server_Applications.sflb.ashx.

This mission was probably the best and most educational one I've done so far out the basic challenges. Thanks to whoever coded it.
http://www.catalyst.hack-inter.net
Author

RE: basic 21, my sql code should extract the password

bram81
Member

Posts: 3
Location:
Joined: 05.09.11
Rank:
Wiseman
Posted on 12-09-11 20:25
the scblockedript you used to find the username is similar but not the same as the one you need for the password. Examine the whitepaper closely because if you found the username then your not too far off from the password.

Good luck

p.s. it's not too hard so don't look into it too much
Guest
Username

Password

Remember Me


Bookmark This Page
Affiliates
Adverts

 

 

Links
By using, viewing or obtaining any information contained on this site, you agree to the disclaimer.

© HellBound Hackers 2008- 2009. Since 3rd December 2004.