| |
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
 |
|
|
I'm kind of stuck. I tried to [HINT!] sql-inject it but when I give it the value of the user level, it tells me that I can't do that because there is some duplicate values or somthing.. I can log in as the user 'admin' simply but he is not level 5 :(
Do I need to upload some file to the server by sql-injection and all that staff with the tftp?
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
You dont need to upload any file, but with the injection- your on the right track.
|
|
|
| |
|
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
|
|
|
Ok listen I'll tell you what I tried exactly..
[EDITED BY CP77FK4R THE 1337- READ THE RULES!] why doesn't it work?!? I can't understand.. I also tried [ARRG] and it worked but I'm not the admin.. I'm so stuck
Edit by : cp77fk4r At 27/09/2005, 23:53:25
|
|
|
| |
|
|
shaman66
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 23
|
| |
|
|
|
|
|
|
I'll tell You that it should work.
A HINT.
If You logged in as a user w/o admin rights and then created user with those right, then if You try to open Admin panel the system will remember You as the user before (no rights). Delete cookies and then check again.
Hope my hint doesnt brake ne rules ;)
Greetz :)
|
|
|
| |
|
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
|
|
|
How didn't I think about it?! tnx alotttttttttttttt man!!!! now thats a real hint man tnx bro i'll try it right now man
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
Wah?!
shaman66...? whats the connection to cookies?
|
|
|
| |
|
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
|
|
|
I don't know what the connection but I deleted all the cookies and I tried to do the sql inj in i.e and not mozilla and it worked!! tnx all I solved it
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
ho, I think that he don't mean that you do SQLI, if this is the problem- you just needed loged off
|
|
|
| |
|
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
|
|
|
yeah maybe. I tried the second time and it worked again. tnx any1
|
|
|
| |
|
|
shaman66
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 23
|
| |
|
|
|
|
|
|
log out didnt work for me. needed to delete cookies :/
or try another browser ;)
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
wired, i'll check it out.
what your browser?
|
|
|
| |
|
|
Inj3ction
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 102
|
| |
|
|
|
|
|
|
shaman66
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 23
|
| |
|
|
|
|
|
|
Opera 8.5, IE, Firefox :)
|
|
|
| |
|
|
cp77fk4r
Global Admin
Registerd on: 01/01/1970, 04:00:00
Location::
Posts: 621
|
| |
|
|
|
|
|
|
it's wired, i'm with IE 6.2 and FF 1.0.7 and it's work great..
|
|
|
| |
|
