Please ask questions ONLY in this topic.

by **beatson** on Fri Apr 18, 2008 10:37 am ([msg=664]see Re: Stuck[/msg])

thanks, but I still have no idea how to do this, is there no easier way how to learn how to do an SQL injection?

by **c24lightning** on Sat Apr 19, 2008 2:43 pm ([msg=740]see Re: Stuck[/msg])

beatson wrote:thanks, but I still have no idea how to do this, is there no easier way how to learn how to do an SQL injection?

This is probably the most commonly-known SQL injection in computer history.

by **SammyJ** on Sat Apr 19, 2008 3:26 pm ([msg=750]see Re: Stuck[/msg])

i just keep getting sql error
no matter what combination i use

what am i doing wrong :?:

by **beatson** on Sun Apr 20, 2008 5:58 am ([msg=789]see Re: Stuck[/msg])

c24lightning wrote:
beatson wrote:thanks, but I still have no idea how to do this, is there no easier way how to learn how to do an SQL injection?

This is probably the most commonly-known SQL injection in computer history.

so should i google the most commonly-known SQL injection in computer history?

EDIT: ah nm, i didnt think it would be that simple, done it

by **-Pein-God-** on Wed Apr 23, 2008 12:48 pm ([msg=1094]see Re: Stuck[/msg])

If you go to HTS Articles on SQL..you find this what do you need

(it help me)

by **tph23** on Sun Apr 27, 2008 5:40 pm ([msg=1546]see Re: Stuck[/msg])

http://www.criticalsecurity.net/index.php?showtopic=10 explains it pretty well.

by **h0und** on Tue Apr 29, 2008 10:34 am ([msg=1715]see Re: Stuck[/msg])

beatson wrote:How do i use an sql injection, i can get it to come up with SQL Error, but no further than that. Not sure how to use one exactly

Make sure you close the quotes (or actually, don't) correctly.

by **c24lightning** on Wed Apr 30, 2008 6:09 pm ([msg=1762]see Re: Stuck[/msg])

With SQL injection in this mission, you're trying to trick the system into thinking you are allowed to log in with a statement that must always be true, such as I am who I am, because I am myself. (kinda confusing -- don't want to give it away. But if you know the syntax, you'll get what I said..

)

by **Rolnaaba** on Mon May 12, 2008 3:54 pm ([msg=2313]see Re: Stuck[/msg])

the previous links to SQL Injection topics help a lot when coupled with the fact that your are trying to make the server think what you are typing in the place is the right password. Consider: How does any computer realize you put the right password? It searches then returns a boolean. How can you make the server receive a true boolean from your injection?

by **ST0L3N** on Tue May 13, 2008 6:16 am ([msg=2344]see Re: Stuck[/msg])

I either got lucky on my first try and pasted the right SQL injection and finished the mission or just found a short way around because i didn't have to send any letter or anything. I used an injection and it said Mission 2 complete. HTS articles does help to anyone thats willing to read this 8-)

and btw it is one of the easiest commands(doesn't necessarily mean the easiest but it is very close)