Basic 7

Basic 7

By ghost | 13381 Reads |

0     0

• Start.

Ok so the description of this challenge is

This time Mr. Deitry decided to make a cookie login script and he said he decrypted it from ASCII encryption, and for you to login you need to encrypt it. And after you login there is another login but its a Login that uses SQL databases, but he thinks that the SQL login page is vulnerable to a simple SQL injection, and when he gets back from his vacation he would fix it.

So what do you think needs done.

-decrypt the username from the ASCII encryption

-use SQL injection to login.

¶Start.

You will notice in the source that it gives the username - sam and password jillisdead. But that won't work… yet… You are probably saying, it says Username: and I know the username is Sam… You are half correct. You may also have tried javascript to inject the username and pass through Address bar… again you are half correct… Remember in the description it tells you to encrypt it from the orignal ASCII? Lets do that now! I am not going to tell you what to encrypt it to but I will give you a site that will help

http://nickciske.com/tools/

Now once you got the encryption you will probably try to use the encryption text into the Username box, don't you need to find a way to inject the username encryption. Once you've done that, a new page comes up asking for the Password… You will probably try jillisdead, but thats not it. You need to read up on SQL Injections here is a site

http://www.securiteam.com/securityreviews/5DP0N1P76E.html

You do not need to inject these through the url but somehow inject it to database. Once you find out how, do that and your done.

Congrats

PM me if there is a mistake or something.