level 6

henry123456789
7 years ago | edited 7 years ago

0

I read all the threads in the four pages of the forum many times and because there is an extreme contradiction in the hints , I could not get any help instead it made me more confused and lost . With 321 tries I could not solve the challenge . Here What I tried so far .

nothing worked for me . I know very well about XPATH injection and how it works and looked in all the links in the forum but I still do not get what I am missing . Any help would be appreciated .

Numlock90
7 years ago

0

Hi @henry123456789,

You were closer earlier in your examples
In the later examples you are overcomplicating it.

If you send me what your using I will try and help.

you are going a bit overboard with the //users/user

Most situations are 95% PIBCAC 5% Network.

Mugi [Mugiwara27]
7 years ago | edited 7 years ago

0

There is too much spoil in there, remove the part where you tell us what you’ve tried or I’ll probably delete the thread :D

Edit: Thanks for removing spoilers ;)

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

Reply has been removed

catacid
7 years ago

0

//users/user selects all “users” databases, while you’re interested in only one database of “users” and all the “user” in it. Also remember you’re looking for a specific person. Took me 2 hours but I figured it out with no prior Xpath knowledge :}

Sandra Murphy

0

0

0

0