Think Very Carefully About What the SQL Commands are Doing

[matrix_abc]

to pm him?
i also got the email adresses but i don't know what to do

edit: i did it
use http://www.hackthissite.org/pages/messa ... s/send.php

[i_fallenhero]

No, you have to email him from the HTS message center on the main page

[DudeJonne]

I completed it with some help of a friend. I want to ask a question about it, without giving a spoiler. So who could I pm with a question about the code that you use to complete this mission?!

Jonne

[yourmysin]

Feel free to message me if you still have a question.

[goluhaque]

OK. i think I know dat where v hv 2 nter d Injection(after converting p*** to g**) But whenever I enter the Injection at d place in a**e****.php, the old msg dat the Email is not valid comes up. Yeah, yeah I know wat part of dat msg is important. But how do we enter the Injection? I think dat a**e****.php blocks d use of SQL Injection. Am I on d right track? Or Do v hv 2 use p*******.php?

[ragnarokio]

i'm stuck here. I know i have to inject SQL into the URL, and i'm pretty confiedent of the command i have to use, but i don't know in exactly what format to insert it, i've read over a few SQL tutorials but they didn't really help me. right now i'm typing in ?(SQL CODE HERE), but that pretty much just refreshes the page.

[Defience]

i'm stuck here. I know i have to inject SQL into the URL, and i'm pretty confiedent of the command i have to use, but i don't know in exactly what format to insert it, i've read over a few SQL tutorials but they didn't really help me. right now i'm typing in ?(SQL CODE HERE), but that pretty much just refreshes the page.

That's not quite the right location, you want to run it while checking out some products and it shouldn't end with '?' although that should be part of the string.

[greyshogun]

you have to go to the "HTS message center" and send the e-mails to SavetheWhales....PS: dont go the the private messages link...

Thanks. It wasn't that hard to get the goods, but I wasn't sure what to do with them afterwards.

I really liked this exercise -- first one where I really felt like I was attacking a live application. Anyone who has stuck with the exercises up to this point, I can say that you're getting close to the point where you can break into field data.

[3nIGhost]

Hey guys im really stuck i mean i havent done this in the longest i beat it b4 like last year but i think it was a bug that said i passed it but i never did anything really just put both pages together now im starting off from scratch so i need help to start over i need help cuz i've been on for 5 days tryna figure this out.... so what would b a good sql learning to get the email from a**e****.*** page..? plz all i need is a little help pm me if you would like i wouldnt mind thnx

[greyshogun]

Hey guys im really stuck i mean i havent done this in the longest i beat it b4 like last year but i think it was a bug that said i passed it but i never did anything really just put both pages together now im starting off from scratch so i need help to start over i need help cuz i've been on for 5 days tryna figure this out.... so what would b a good sql learning to get the email from a**e****.*** page..? plz all i need is a little help pm me if you would like i wouldnt mind thnx

To make effective sql injection attacks, you will need to learn a certain amount of sql. Assuming that the middleware of the application contains injection vulnerabilities, from that point forward it is your skillz with sql that will help you to break in.

I'm not sure how to help you get good sql knowledge -- I did database programming professionally for a few years so I have that to fall back on.

One pointer I can give you is this -- whatever query this sort of application is making, in many cases it will be something of this form:

select (some stuff) from (some tables) where (certain conditions are met)

essentially, any code you try to inject will need to be appended to the end of this sort of sql statement, or at least in the case of this particular example. Try to imagine what the database query would be, and imagine something (sql compliant) that you could tack onto the end that would allow you to make your attack.

Also, you'll have to visualize what you imagine the middle-ware to be doing. Remember that in the case of reconnaissance sql attack, you'll need to comply with the requirements of the middle-ware in order to get the info you n33d.