Frozen in PlanetBid

n1b1ru
9 years ago | edited 9 years ago

0

Two days frozen in this level and I don’t find the right injection technique in PlanetBid with admin username.

Any suggestion???

Really desperated!! ;)

Rgds.

dloser
9 years ago

0

You are missing something obvious.

Mr. Cyph3r [MrCyph3r]
9 years ago

0

Maybe it is not really an “injection” for this step… I suggest you to check all the links provided within the challenge’s briefing/description ;)

tehron
9 years ago

0

MrCyph3er, what do you mean?
And @dloser, what do you mean?
Please elaborate.
So long

V NZ OBERQ

n1b1ru
9 years ago

0

yes,maybe you mean the admin link, right?? No progress on it

Mr. Cyph3r [MrCyph3r]
9 years ago

0

I don’t know what’s the admin link you are talking about… I can’t see an “admin link” on challenge description.

Here is the description:

https://www.hackthis.co.uk/levels/real/4

@tehron, crypto9 style, fu** yeah! lol

2 replies have been removed

puikaaa
8 years ago | edited 8 years ago

0

@tehron and @MrCyph3r is that a hint? lol :D
@scrnhms93 if I could I would give you bad karma. You could at least use spoiler

Reply has been removed

noname [egorius]
8 years ago | edited 8 years ago

0

Same problem. I tried a few sql injection techniques and sqlmap as well, didn’t work. I also tried to login with admin and Revoked.Mayhem user-names + all passwords from the Top10, all negative. I also scanned the directory, same result, nothing there. It feels frustrating so far….

f0rk [HackingGuy]
8 years ago | edited 8 years ago

0

@egorius , Maybe take another look at the admin account ;)

There’s no place like 127.0.0.1

noname [egorius]
8 years ago

0

Because of you I just get older like in 10 years, telling you again - you are not helping !!!

Markb2
8 years ago | edited 8 years ago

0

Egorius, this man is just trying to help you.

[quote=egorius]Same problem. I tried a few sql injection techniques and sqlmap as well, didn’t work. I also tried to login with admin and Revoked.Mayhem user-names + all passwords from the Top10, all negative. I also scanned the directory, same result, nothing there. It feels frustrating so far…. [/quote]

The right thing to do is among those you (say) already tried. Pretty sure you made a very unlucky typo if you really tried all the above and didn’t get in.

To narrow it down a bit: No scanning/tools required.

Kerachi
8 years ago

0

Just try to find out what could be the “admin” username.
What is this Top 10 in the description? Maybe passwords?…

I don’t know why isn’t obvious to you.

Most people are not stupid, just ignorant…

Alien [necromonger]
6 years ago

0

@Kerachi 1.) Love your Avatar (My ringtone is “What’s up People ” from that Anime!!) Second, your hint was great. It got me started, I’m now looking at the members database, logs and bids!!! Thank you again!

We keep what we kill

Planet Bid

0

0

0

0

0

0

0

0

0

0

0

0

0