Please ask questions ONLY in this topic.

[james44121]

I'm not gonna lie, I have absolutely no idea why the "injection" I entered into the user/pass fields worked (hint I only entered it into one of the fields), but for some reason it did.

[fashizzlepop]

I'm not gonna lie, I have absolutely no idea why the "injection" I entered into the user/pass fields worked (hint I only entered it into one of the fields), but for some reason it did.

Not gonna lie, that means you didn't learn anything.

[Enzime59]

Not gonna lie, this mission was way too easy after figuring out what to read up on. After that I had the idea of minig it out of the forms, so I was a bit suprised about the first 'test' I did instantly completed the mission. I'm glad I know more about sql now than I needed to for this mission though, so in that sense it did its job.

[lekoala]

Hi

I got the answer pretty quick with one of the hits that i recon was kid of a spoiler since i got the answer but don't understand it. Can anyone pm me and we can discuss how it worked and what was the flaws of the site.

thank you in advance

[mShred]

Hi

I got the answer pretty quick with one of the hits that i recon was kid of a spoiler since i got the answer but don't understand it. Can anyone pm me and we can discuss how it worked and what was the flaws of the site.

thank you in advance

You may PM me if you need help understanding. As can everyone.

[WERRO]

Hey, I found the hidden link, used it to get to the logon page and put in some SQL but I just get SQL error. All the tutorials on SQL i've found say to use the error message to find vulnerablities but the full error report doesn't show up, I'm blind. Am I doing something wrong?

-- Wed Dec 21, 2011 5:20 pm --

Hey, I found the hidden link, used it to get to the logon page and put in some SQL but I just get SQL error. All the tutorials on SQL i've found say to use the error message to find vulnerablities but the full error report doesn't show up, I'm blind. Am I doing something wrong?


UPDATE: Yay, I figured it out, turns out it did tell me what was wrong, I just didn't look closely enough

[Defience]

Good job on figuring it out. Sometimes you need to take a step back to see things clearer.

[laeraren]

Not gonna lie, having people "hack" the website of a political opponent as a "realistic example", no matter how idiotic that opponent may be, is rather disturbing.

[strongard]

a very easy challenge but tricky one
all what you have to do to solve this challenge is to read the link to sql injection in HTS articles

[GSmyrlis]

Nice challenge,funny and good! The only difficult it may have is the sql injection


My hint is:
Find a good article/link or whatever you like which says the injections.
Find the command you want, find where security is low and write the correct injection/command!

- If you don't even know how to login, just look better in the page. It's easy to find it!

You won't need more than that!!!