And I thought level 5 was tough

Sigma18
8 years ago

Now I finally reached level 6 only to realize that there was gonna be gigantic cobra waiting to eat me up.

so I need help I have Zero knowledge of XML and I know only the basics of SQL without the logic stuff so yeah

I am lost I also read the threads all of them the Xpath injection stuff on different sites and all I could make up so far was this

UserName=‘blah’ or 1=1 or'a'=‘a && realname='Sandra Murphy’

I kept improving it so now it looks like ‘this’ but I don’t if I’m even close or not.

I think I need some more help. :s

5replies

3voices

238views

? [bolofecal]
8 years ago

maybe you have incorrect syntax in
or'a'='a &&...

?

Sigma18
8 years ago

Oh ok I’ll check

Sigma18
8 years ago

nope still says “Invalid details”

this time I did it like this

UserName=‘blah’ or 1=1 or realname=‘Sandra Murphy’ or ‘a’=‘a

Mugi [Mugiwara27]
8 years ago

@Sigma18 there are some useless things
Re-read the level description, does it say that you have to login with the UserName ‘blah’ ?

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

Sigma18
8 years ago

O'Yeah I Got it! Victory Dance Time :D geez I’m so happy thanks guys for the support and everything hehehe :)

Discussion thread has been locked. You can no longer add new posts.