Follow us on Twitter!
The measure of a mans life is not how well he dies, but how well he lives.
Friday, May 06, 2016
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 26
Guests Online: 25
Members Online: 1

Registered Members: 93541
Newest Member: YungReyes
Latest Articles
View Thread

HellBound Hackers | Challenges | Basic

Author

basic 20

chartira
Member

Your avatar

Posts: 2
Location:
Joined: 26.01.13
Rank:
Moderate
Posted on 07-02-13 11:41
hey guys , i want some hints please
i tried : adm****** UN*** A** SEL*** * FROM
the replies is : You are on the right track, but this will not bypass the login.
where is my mistake ?
Author

RE: basic 20

tnk04
Member

Your avatar

Posts: 8
Location:
Joined: 23.10.12
Rank:
Newbie
Posted on 07-02-13 16:22
You're over complicating things.
You don't need to retrieve data, but simply make it overlook some.
It is literally the most obvious SQL injection that you could think of.
Author

RE: basic 20

chartira
Member

Your avatar

Posts: 2
Location:
Joined: 26.01.13
Rank:
Moderate
Posted on 07-02-13 22:11
thanqs a lot , it did work thanqs to ur advice
Author

RE: problems

DAce
Member



Posts: 2
Location: Austria
Joined: 12.08.14
Rank:
Elite
Posted on 14-08-14 08:46
i tried different injections like mentioned in
https://www.hellboundhackers.org/articles/read-article.php?article_id=862
so that the username or password will be ignored but it didn't worked.... any hint?
Author

RE: basic 20

rex_mundi
☆ Lucifer ☆



Posts: 1956
Location: Scotland
Joined: 20.02.08
Rank:
God
Posted on 15-08-14 09:47
Login with the username and password it gives you, and since the input boxes are now gone, try and find somewhere else you can inject.

And it's NOT in the url.


U N ⓡⓔⓧ_ⓜⓤⓝⓓⓘ
Author

RE: basic 20

omega_tek
Member

Your avatar

Posts: 1
Location: HELL
Joined: 16.02.15
Rank:
Monster
Posted on 27-02-15 16:47
try and find somewhere else you can inject. And it's NOT in the url.


That really helped!!


Ω
Author

RE: basic 20

splext
Member

Your avatar

Posts: 2
Location:
Joined: 24.10.15
Rank:
Wiseman
Posted on 24-10-15 17:37
omega_tek wrote:
try and find somewhere else you can inject. And it's NOT in the url.


That really helped!!


Hi all, this thread looks untouched for ages so apolgies, I have just joined.
So ill try and say this without spoilers:

I have injected C******, and it says nice try. have done it from homepage and from after login but still to no prevail.
Any other hints for me?
Author

RE: basic 20

Huitzilopochtli
Member



Posts: 1381
Location:
Joined: 19.02.13
Rank:
God
Posted on 25-10-15 04:08
If you're logged in, and editing the c*****, it doesn't matter what page your doing it from, if it doesn't work after refreshing the page, then it's your injection that's wrong.

Think simple' or one and one, will never add up to two. Thumbs Up