Donate to us!
Become the change you seek in the world. - Gandhi
Friday, September 21, 2018
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 144
Guests Online: 143
Members Online: 1

Registered Members: 106647
Newest Member: JamesOpeve
Latest Articles
View Thread

HellBound Hackers | Challenges | Basic

Author

basic 18

cioic
Member



Posts: 18
Location: going nuclear before death
Joined: 28.05.17
Rank:
Hacker Level 1
Posted on 30-06-17 22:32
[SPOILR WARNING]
[SPOILR WARNING]
[SPOILR WARNING]
ok so I don't understand two things in this challenge.

1.) Why are numbers used to show columns ?

2.) How come the database name is ******** ?

Usually column names are like "name,city,phone,country"

If the column names were realistic and a non standard database name was used, would this challenge still be able to be solved in the way it was solved now ? How would it be approached if it was not ?


onclick="destroytheworld()"

Edited by rex_mundi on 01-07-17 20:36
index.php
Author

RE: basic 12

Huitzilopochtli
Member



Posts: 1593
Location:
Joined: 19.02.13
Rank:
God
Posted on 30-06-17 23:42
1.. You need to know how many columns there are, before you can UNION them, that's why you use ORDER by.

2.. It's not the database name you're looking forr, It's the table name, and it's given that name,  because that's what is stored in it.

3.. You'd substitute the real column names for the numbers in a real situation.
Author

RE: basic 12

cioic
Member



Posts: 18
Location: going nuclear before death
Joined: 28.05.17
Rank:
Hacker Level 1
Posted on 01-07-17 03:05
thanks, but how'd you find the real column names in a real situation ?


onclick="destroytheworld()"
index.php
Author

RE: basic 12

Huitzilopochtli
Member



Posts: 1593
Location:
Joined: 19.02.13
Rank:
God
Posted on 01-07-17 15:53
From the INFORMATION_SCHEMA https://dev.mysql. . .chema.html