(adsbygoogle = window.adsbygoogle || []).push({}); Test out your SQL injecting skills

Sql Injection Competition

Okay so this is a contest, to see who can get the admin username and password first.

The winner will recieve a 50k vBux reward!

It is free to enter!

Once you receive the admin username and password, post here, the first person to post the correct details will win the prize!

The site is: https://nopalindonesia.com/

some extra notes:
I know the username & password, and they will stay the same because the site has some serious database issues



{}{}{} GO {}{}{}

un-FAQ
Q) why I'm doing this for free?
A) I'm bored and vBux don't really matter to me, so enjoy! I also want to see how many people here have read You must login or register to view this content.‎ tut on SQL injection.

yeah you can try, I've tried uploading shells and failed though, I can't find an exploit in their photo uploader >

and have you got the donation yet, because ive tried donating three times, and i still have the same money as before?


just saw your second post, ill try again

---------- Post added at 03:06 AM ---------- Previous post was at 03:01 AM ----------



done! hope to see you in the next contest as well

I dont know yet, soon!
Not many people here know much about website hacking, usually I host these kinds of tournaments on HackForums, where I get heaps of entries, but I got banned until next year, for selling Jack Daniels out of the "MarketPlace" section

should the next tournament be on SQL injection again?
or another attack like XSS?

EDIT: if i make it on XSS i will have to make a tut beforehand, so the next tournament might not be for a while...