Please ask questions ONLY in this topic.

Racist pigs are organizing an 'anti-immigrant' rally in Chicago. Help anti-racist activists take over their website!

Finished, but...

Post by Facebotter on Sun Feb 08, 2015 6:31 pm
([msg=86648]see Finished, but...[/msg])

So I managed to get past this level, but I'm not quite sure what I did. I researched sql injection and found the admin username, but I don't get how what I entered as the password let me in. If someone could please PM me, I will explain what I did and hopefully you could help me understand. Thanks!
Facebotter
New User
New User
 
Posts: 3
Joined: Sun Feb 01, 2015 1:08 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by spyramidas on Tue Mar 17, 2015 9:20 pm
([msg=87214]see Re: Please ask questions ONLY in this topic.[/msg])

Just like Facebotter, i saw an SQL injection link and got past this level. No idea what i did. Dont know sql (i think i should learn). Can u pm me for further details on how my "solution" worked?
spyramidas
New User
New User
 
Posts: 9
Joined: Tue Mar 17, 2015 8:55 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by cyberdrain on Wed Mar 18, 2015 3:07 pm
([msg=87244]see Re: Please ask questions ONLY in this topic.[/msg])

spyramidas wrote:Just like Facebotter, i saw an SQL injection link and got past this level. No idea what i did. Dont know sql (i think i should learn). Can u pm me for further details on how my "solution" worked?

PM me with your solution, expectations and how you think it worked.
Free your mind / Think clearly
User avatar
cyberdrain
Expert
Expert
 
Posts: 2160
Joined: Sun Nov 27, 2011 1:58 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by parado on Sun Mar 22, 2015 10:26 am
([msg=87348]see Re: Please ask questions ONLY in this topic.[/msg])

Hey all,

I just got through the challenge, but still do not understand something. Hopefully someone can help me out =)

It's no secret that this is an SQL injection problem. I put my statement in but kept getting an SQL error. When I *removed* to my statement it went through. I am not aware of any command or syntax in SQL that contains this, so I was wondering why it worked.

For example, if my statement was: *removed* I had to put *removed*

Thanks!
parado
New User
New User
 
Posts: 4
Joined: Sun Mar 22, 2015 10:21 am
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by cyberdrain on Sun Mar 22, 2015 10:41 am
([msg=87349]see Re: Please ask questions ONLY in this topic.[/msg])

It is part of the answer, therefore it's a spoiler. I'll PM you the reason why this statement works.
Free your mind / Think clearly
User avatar
cyberdrain
Expert
Expert
 
Posts: 2160
Joined: Sun Nov 27, 2011 1:58 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by Viper Dragon on Mon Mar 23, 2015 6:05 am
([msg=87358]see Re: Please ask questions ONLY in this topic.[/msg])

-Completed-
Viper Dragon
New User
New User
 
Posts: 1
Joined: Mon Mar 23, 2015 6:02 am
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by InterstellarDove on Wed Apr 08, 2015 10:45 pm
([msg=87639]see Re: Please ask questions ONLY in this topic.[/msg])

Okay - so I figured it out after reading about *** structuring/injection, watching some videos, and practicing it on an *** certification site for an hour or so. But - after figuring it out I went back to mess around with it, and I noticed that you can use the same syntax, but replace the answer with a different variable but it won't work when you do that - I'm trying to understand why. I think I have an idea but obviously don't want to post too much here.

I think I'm eating on the wrong table ;). Or something. Unsure but it'd be nice if someone could PM me.
Hope I didn't post too much.

Thank you guys - fun mission.
InterstellarDove
New User
New User
 
Posts: 1
Joined: Wed Apr 08, 2015 10:39 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by duschgel on Sat Apr 25, 2015 4:03 pm
([msg=87807]see Re: Please ask questions ONLY in this topic.[/msg])

I was kind of in a rush and usually follow all the links/urls i can find and take a look around...
after quite some time i realized
I was accidentally starting to "work" on the actual american nazi site...

im not here to break (american) law when im just playing...
although i deeply reject this nazi shit....
a warning or something would be nice
duschgel
New User
New User
 
Posts: 1
Joined: Sat Apr 25, 2015 3:52 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by NETWORKsecurity on Tue Apr 28, 2015 2:50 pm
([msg=87849]see Re: Please ask questions ONLY in this topic.[/msg])

duschgel wrote:I was kind of in a rush and usually follow all the links/urls i can find and take a look around...
after quite some time i realized
I was accidentally starting to "work" on the actual american nazi site...

im not here to break (american) law when im just playing...
although i deeply reject this nazi shit....
a warning or something would be nice

Lol,dude the site is not real, scenario is fictious(tho it may sound realistic).Site is simulated and when you break in you wont even get chance to deface it but you will just get points and you can move on to next mission.
NETWORKsecurity
Moderator
Moderator
 
Posts: 108
Joined: Wed Oct 15, 2014 3:20 pm
Blog: View Blog (0)


Re: Please ask questions ONLY in this topic.

Post by b00sterG0ld on Mon May 25, 2015 2:49 pm
([msg=88184]see Re: Please ask questions ONLY in this topic.[/msg])

I just want to say, that I've been banging my head against this off and on for about 16 or so hours and finally got it.

I researched with the links, i read into SQL injection, i learned about forms and hidden source info i hadn't learned before; if you learn anything from this thread, it's that if you actually read the links provided and dabble around with it, you will get it. Take the advice of everyone on this thread that the answer can't be handed out, and i know it's frustrating, but just try the links and work it out, you'll get it.
b00sterG0ld
New User
New User
 
Posts: 1
Joined: Mon May 25, 2015 2:45 pm
Blog: View Blog (0)


PreviousNext

Return to (Real 2) Chicago American Nazi Party

Who is online

Users browsing this forum: No registered users and 0 guests