pointers pls

Fe@r-!5 [fear-15]
10 years ago

0

lol' or 1=1 or ‘a’=‘a i gave this as username stiill only saying error with request any pointers from u guys

[deleted user]
10 years ago

1

You are on the right track.

1=1 is only used when you don’t know the username or any value but in this case you know it.

Fe@r-!5 [fear-15]
10 years ago

0

username name is sandra murphy?

[IAmDevil]
10 years ago

0

Yes check out the hint for some extra clues!! ?

- @IAmDevil
Its good to be back! :D

[deleted user]
10 years ago

0

Does it say username?

Fe@r-!5 [fear-15]
10 years ago

0

no i know it s not user name its her real name so the username will be like >> smurphy

[IAmDevil]
10 years ago

0

Guys chat over IRC. ?

- @IAmDevil
Its good to be back! :D

Fe@r-!5 [fear-15]
10 years ago

0

ok i know the user name i should not use 1=1 … i think i have to use the username@the end of injection right

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

1

@fear-15: As someone mentioned before, please complete SQLi levels first to learn how to inject. You can’t complete it without knowing the right syntax.

You were like “Let me inject it! Let me inject it! Right syntax and logical operators? Who cares!”. We want to help, but we can’t help someone who haven’t known the basic (of this level) from the start.

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

Fe@r-!5 [fear-15]
10 years ago

0

i think i got it i have to give something like this >> smurphy' or 1=1 or ‘a’=‘a’ to create error so i have to insert another 1=1 to make it true

Fe@r-!5 [fear-15]
10 years ago

0

ami right

Cyan Wind [freewind1012]
10 years ago

0

You got nothing. The hint is really important. Make sure you read it and know what it says.

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

Fe@r-!5 [fear-15]
10 years ago

0

the hint gives name at the end login and password before and nod as user

Fe@r-!5 [fear-15]
10 years ago

0

what should i look for in the hint

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

0

Then you really know nothing about XML and XPath query. Please try to make a proper XPath query first. You can’t hack anything if you don’t know how it works.

This thread is long enough.

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

3

This is my last post in this thread. As I said: Please complete SQLi levels first! They are easier than Intermediate Level 6. When you get used to injecting, come back. You will see what you are wrong now. ;)

There’s no need to complete all levels in order. Did your math teacher not say: “Solve the easier exercises first!”?

![Image](https://www.hackthis.co.uk/user/userbar.png?user=freewind1012%20//%20Navigator)

Fe@r-!5 [fear-15]
10 years ago

1

will do ….. sir

Sandra Murphy

0

1

0

0

0

0

0

0

1

0

0

0

0

0

0

3

1