Hackthissite Realistic Mission 4

In this video I will show you how to complete hackthissite realistic mission 4.

Code:

UNION ALL SELECT NULL, *, NULL, NULL FROM email;

Category:

Howto & Style

Tags:

• hack
• hacker
• hacking
• hackthissite
• realistic
• mission
• computer
• technology
• how
• to
• tutorial
• deepfreeze1234

[Froggolistic]

Thank you so much for this vid. You really helped me out a lot with this information.

The only thing i don't get... Is the part with the UNION ALL...

Can i do this trick also on other sites or DBases or is it just a example for learning this kind of technique.

Hope to get a answer from you, thanks for the vid ;)

Greets

[DeepFreeze1234]

No problem.

And the answer to your question, this is just an example for learning different kinds of injections. It might work on some other sites and DBases, but I wouldn't get my hopes up.

[xmangosaintx]

nice one bro... hey is thr anyway to do realistic mission 1 without firefox?? can i do it with my normal ie??

[DeepFreeze1234]

thanks, and yes.

[thetrumpetofbelieve]

Why do you have to go to the product page to reveal the email addresses?

[vVvzergling]

@dsh1224 i know its kinda late to reply to this but from what ive learned of sql injection i believe null is used to represent tables

[cloudwolfsa]

I will never be a Good Hacker :c I suck and always will...

[LOKKOLove]

@DeepFreeze1234 How?! I've tried notepad AND the address bar, nothing works. I had to use a Chrome tool (similar to Firebug)...

[ether9]

@dsh1224 The UNION ALL statement is combining 2 select statements, and each select statement has to select the same number of things. So with the products page, we can guess that the initial select statement is selecting an ID, a picture, a price, and description. That's 4 things, so our UNION ALL has to contain 4 things to match, even if the "email" table has less. The "*" means "select whatever's there" while null means "select nothing". A little trial/error will get you the right result.

[pinkistoughjj]

so how did u learn SQL injections or whatever it is called? i am wondering becuz I am interested in learnin em

[dsh1224]

Great video. One question: why so many nulls? What purpose does the null command have to the injection? I know this may seem stupid because I get the concept of the injection, but for some reason the right answer makes no sense to me.

Thanks though, really a great video.

[4goten2eat]

nope

[4goten2eat]

What do i put in the subject box, anything i supose..