Follow us on Twitter!
Understanding is the answer, hatred is the problem, and hackers are the slaves abused and destroyed in the process of peace online - Deshouleres
Friday, April 25, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 20
Guests Online: 20
Members Online: 0

Registered Members: 82908
Newest Member: krishna7799
Latest Articles
View Thread

HellBound Hackers | Challenges | Basic

Author

Stuck on level 21


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 21-03-11 15:21
Ok, so far all I have managed to do is getting the first SQL error message (this is right after the login screen of level 21). I have read the White Paper and tried all the stuff that is suggested in it. I have also read the forum and tired to follow the hint that were given, but still no luck.

------------------------------------------------------------------------------------------------------------------------------------
LanceUppercut wrote:
The answer is right there in the whitepaper....

After you've found out what columns exist in the table, you need to find a way to enumerate values from those columns. The problem with the login page is that it is not designed to return the values that you've queried, just allow access to a user that has credentials in the table. In that case, we need to be able to find a way to get data from the tables. We do that by enumerating values through syntax errors.

After the section in the whitepaper that shows you how to enumerate the column names, read further on how to create type convertion errors...Once you know how to do that, you can enumerate the usernames and passwords through error messages. The answers are in there...just read a little further down Smile
-----------------------------------------------------------------------------------------------------------------------------------------------
But everything I have tried does not bring a SQL error message screen, only a

Not Found
The requested document was not found on this server.

Web Server at hellboundhackers.org

So could anyone PM me, and maybe go through some of the things I need to do.

Thanks.
JC

Author

RE: Stuck on level 21

stealth-
Member



Posts: 1003
Location: Eh?
Joined: 10.04.09
Rank:
Mad User
Posted on 21-03-11 20:30
You shouldn't be getting 404 errors, I just checked the challenge and I can confirm it works fine without any 404's. If you'd like, feel free to PM me what you're trying and I'll take a look.


The irony of man's condition is that the deepest need is to be free of the anxiety of death and annihilation; but it is life itself which awakens it, and so we must shrink from being fully alive.
http://www.stealt. . .
http://www.stealth-x.com