Join us on Slack!
The measure of a mans life is not how well he dies, but how well he lives.
Tuesday, October 22, 2019
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 49
Guests Online: 49
Members Online: 0

Registered Members: 119193
Newest Member: AntonWhews
Latest Articles
View Thread

HellBound Hackers | Challenges | Basic

Author

Basic 18 what am i doing wrong

shiroslullaby
Member



Posts: 11
Location:
Joined: 25.01.15
Rank:
Hacker Level 2
Posted on 26-01-15 05:20
Ive read the tutorials on SQL injection on this site and other places.
Once I use the OR**R B* command and see the article
shouldnt I be able to use a
UNION ALL SELECT 5 from ******** command?

Ive also tried replacing the 5 with n**l...

Edited by rex_mundi on 26-01-15 12:47
Author

RE: Basic 18 what am i doing wrong

Kr4kH3d
Member



Posts: 1
Location:
Joined: 15.01.15
Rank:
Monster
Posted on 26-01-15 12:34
It looks like you are 90% of the way there. Now that you've determined how many columns there are, try to display them all on the same page(instead of just the last one.)

There was a very similar thread on this several years ago

https://www.hellb. . .999_0.html

If you still can't seem to figure out the exact statement required, PM me.
Author

RE: Basic 18 what am i doing wrong

Huitzilopochtli
Member



Posts: 1622
Location:
Joined: 19.02.13
Rank:
God
Posted on 26-01-15 12:48
Close man but no cigar.

Normally your injection would produce an error like this:
The used SELECT statements have a different number of columns


That's because UNION and UNION ALL require that all the queries being UNIONed have the same number of columns in the SELECT clause.

You already know the correct number of columns, but you are only including the last one.
Author

RE: Basic 18 what am i doing wrong

shiroslullaby
Member



Posts: 11
Location:
Joined: 25.01.15
Rank:
Hacker Level 2
Posted on 26-01-15 17:46
Thanks for the hints I ended up getting it due to your guys advice and this article:

http://www.thisislegal.com/tutorials/3
Really good article IMO

Edited by shiroslullaby on 26-01-15 19:56