Mar 8, 2012

HTS Realistic Mission 2


Solution to HACK THIS SITE . ORG Realistic Missions
From Dexter’s Lab
The realistic missions from the site Hackthissite.org is really very fascinating and overwhelming. I am considering you know a little bit about the programming things. If not then I am sorry for you because these things may seems too tough for you.

REALISTIC MISSION 2

SQL INJECTION METHOD
This page involves utilizing a SQL Injection Attack. If you have observed the source code you have noticed that which leads us to a page “update.php”. Many of the sites are still unprotected. One can easily access the admin panel using this trick
<a href="update.php"><font color="#000000">update</font></a>

So we’ve headed to
http://www.hackthissite.org/missions/realistic/2/update.php and there we found an admin panel. But it seems to be unprotected due to SQL injection.
username : ' OR 'a'='a
password :  ' OR 'a'='a

And you have got access to a panel which has enough privilege to update the thing!!
 

No comments:

Post a Comment