[Challenge] SQLi Challenge #2 - Printable Version

[Challenge] SQLi Challenge #2 - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: [Challenge] SQLi Challenge #2 (/Thread-Challenge-SQLi-Challenge-2)

Pages: 1 2 3

[Challenge] SQLi Challenge #2 - Lotus Black - 05-04-2014

Target:

Code:
www.bournemouthroad.co.uk

Tasks:
#Print DB Version with your name
#DB Name
#User Name
#OS
#Symlink
#Show your girlfriend xD

Rule:
Should be union-based only.

Proof:
[Image: jrgdLnXPDXfnl.jpg]

Solvers:
1.
2.
3.

RE: [Challenge] SQLi Challenge #2 - Bannedshee - 05-04-2014

if that was my girlfriend i wouldn't be on my computer anymore

RE: [Challenge] SQLi Challenge #2 - Cake - 05-04-2014

Why do you keep giving us gay ass google dork ones where they forgot to sanitize shit properly?

RE: [Challenge] SQLi Challenge #2 - Lotus Black - 05-04-2014

(05-04-2014, 08:53 PM)Kodo Wrote: Why do you keep giving us gay ass google dork ones where they forgot to sanitize shit properly?

i have no more special purpose bro, it's just for fun in my challenge.

RE: [Challenge] SQLi Challenge #2 - Cake - 05-04-2014

(05-04-2014, 08:59 PM)Lotus Black Wrote: i have no more special purpose bro, it's just for fun in my challenge.

it would be more fun if you gave us real challenges..

RE: [Challenge] SQLi Challenge #2 - Adorapuff - 05-04-2014

(05-04-2014, 09:19 PM)Kodo Wrote: it would be more fun if you gave us real challenges..

If I gave you an AppSec challenge involving ASLR bypass, I doubt you would be able to solve it.

RE: [Challenge] SQLi Challenge #2 - Dyme - 05-04-2014

(05-04-2014, 09:39 PM)Adorapuff Wrote: If I gave you an AppSec challenge involving ASLR bypass, I doubt you would be able to solve it.

Oh my ASLR calm down there big boi...

RE: [Challenge] SQLi Challenge #2 - Adorapuff - 05-04-2014

(05-04-2014, 10:42 PM)Dyme Wrote: Oh my ASLR calm down there big boi...

I just don't like people asking for challenges they won't be able to solve.

RE: [Challenge] SQLi Challenge #2 - Dyme - 05-04-2014

(05-04-2014, 10:43 PM)Adorapuff Wrote: I just don't like people asking for challenges they won't be able to solve.

I don't think that he was necessarily asking for a memory corruption challenge in which one has to mitigate ASLR, though.

Most likely he was referring to harder sql injection challenges, as that is what this thread is pertaining to.

RE: [Challenge] SQLi Challenge #2 - Cake - 05-05-2014

(05-04-2014, 09:39 PM)Adorapuff Wrote: If I gave you an AppSec challenge involving ASLR bypass, I doubt you would be able to solve it.

Would I be able to solve it? Probably not. Would it be more fun trying to solve than a simple google dork? Hell yes.