Think Very Carefully About What the SQL Commands are Doing

FAP is company that slaughters animals and turns their skin into overpriced products which are then sold to rich bastards! Help animal rights activists increase political awareness by hacking their mailing list.

Fischer's Animal Products

Post by Karate-Boy on Mon Apr 28, 2008 12:00 pm
([msg=1621]see Fischer's Animal Products[/msg])

I can't find the place where u can post for Realistic Mission 4, so I've post it here.

I know that I must receive some e-mails, but can anyone help me with that?
Must I use a UNIX command or anything? Please help me!!
Karate-Boy
New User
New User
 
Posts: 25
Joined: Sat Apr 26, 2008 9:43 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by TheMindRapist on Mon Apr 28, 2008 12:09 pm
([msg=1622]see Re: Fischer's Animal Products[/msg])

Try finding out where the emails are stored...
Image
User avatar
TheMindRapist
Contributor
Contributor
 
Posts: 585
Joined: Mon Apr 14, 2008 4:57 pm
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by Karate-Boy on Tue Apr 29, 2008 4:15 am
([msg=1691]see Re: Fischer's Animal Products[/msg])

If I put my real e-mail into the box, I see this message:
"Error inserting into table "email"! ..."
So are the e-mails stored in a table?
Karate-Boy
New User
New User
 
Posts: 25
Joined: Sat Apr 26, 2008 9:43 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by novalyphe on Tue Apr 29, 2008 6:00 am
([msg=1693]see Re: Fischer's Animal Products[/msg])

Try looking up SQL injection.
novalyphe
Experienced User
Experienced User
 
Posts: 51
Joined: Mon Apr 14, 2008 11:15 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by purple_pixie on Tue Apr 29, 2008 6:20 am
([msg=1696]see Re: Fischer's Animal Products[/msg])

Karate-Boy wrote:If I put my real e-mail into the box, I see this message:
"Error inserting into table "email"! ..."
So are the e-mails stored in a table?

Jeez. Yes, yes they are.

But you want to *access* the emails, not insert into them.

So now that you know the table name, find something that *selects* from the database ...
purple_pixie
New User
New User
 
Posts: 22
Joined: Mon Apr 28, 2008 8:08 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by Karate-Boy on Tue Apr 29, 2008 7:49 am
([msg=1702]see Re: Fischer's Animal Products[/msg])

purple_pixie wrote:... find something that *selects* from the database ...

Yeah..I'm trying some SQL injectons with SELECT :D
Karate-Boy
New User
New User
 
Posts: 25
Joined: Sat Apr 26, 2008 9:43 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by purple_pixie on Tue Apr 29, 2008 8:03 am
([msg=1703]see Re: Fischer's Animal Products[/msg])

On the "add email" page ... well "good luck" is all I'm saying.
purple_pixie
New User
New User
 
Posts: 22
Joined: Mon Apr 28, 2008 8:08 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by novalyphe on Tue Apr 29, 2008 9:47 am
([msg=1710]see Re: Fischer's Animal Products[/msg])

What's the difference between "get" and "post" methods in HTML forms? and which is used on the site?

If you know it might help you figure out where you need to put your SQL injection.
novalyphe
Experienced User
Experienced User
 
Posts: 51
Joined: Mon Apr 14, 2008 11:15 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by Karate-Boy on Tue Apr 29, 2008 10:15 am
([msg=1713]see Re: Fischer's Animal Products[/msg])

Can anyone give me a hint about that SQL injection?
Karate-Boy
New User
New User
 
Posts: 25
Joined: Sat Apr 26, 2008 9:43 am
Blog: View Blog (0)


Re: Fischer's Animal Products

Post by c24lightning on Wed Apr 30, 2008 6:00 pm
([msg=1760]see Re: Fischer's Animal Products[/msg])

Karate-Boy wrote:Can anyone give me a hint about that SQL injection?

SELECT * FROM...

That's pretty much all I can say.. But find out more about those injections.
Here's some sites you might be interested in:

Need a proxy? Here - user:pass combination is proxy:bypass
c24lightning
Poster
Poster
 
Posts: 203
Joined: Sat Apr 19, 2008 7:46 am
Location: The infinite insanity of thought
Blog: View Blog (0)


Next

Return to (Real 4) Fischer's Animal Products

Who is online

Users browsing this forum: No registered users and 0 guests