I don’t quite get it, I got something like this
;SELECT files FROM muscle_car_reviews WHERE categories=‘Muscle’ or 1=1
But it says no such file directory, am I over thinking this?

Reply 204

ManLineZing

Anyone know how to do Level 4 Challenge 5. I know it's simple but nothing i've done has worked

Reply 205

danh2002

Original post by J4sonl3e

I don’t quite get it, I got something like this
;SELECT files FROM muscle_car_reviews WHERE categories=‘Muscle’ or 1=1
But it says no such file directory, am I over thinking this?

You only need the ' or 1 = 1
Basically 1=1 always evaluates true so SQL will display everything in the table you don't need to guess table names or columns

Reply 206

JBenMorris

Anyone know how to fake cookies?

Specifically over HTTP requests

(edited 6 years ago)

Reply 207

juju2964

Original post by Haymaker37

Level 7 part 4 please. Don't know where it is

Look up into google 'Where are passwords stored in old linux' should come up. :smile:

Reply 208

juju2964

Original post by Jamiewinter

Quick update: How are you guys all doing? :smile:

Any help with HQ8 level 10? I can return the favour with other levels

Any help for L8 C6?

Reply 209

AnaaaElec

Original post by JBenMorris

Anyone know how to fake cookies?

Specifically over HTTP requests

Use the VM cookie editor

Reply 210

JBenMorris

Nuuuu. I need to send cookies over HTML. Not edit them. They literally need to be faked using urllib2

Reply 211

AnaaaElec

Try checking this out, scroll down:

https://stackoverflow.com/questions/3334809/python-urllib2-how-to-send-cookie-with-urlopen-request

You’ll need to learn how to use the CookieJar Module though.

Reply 212

JBenMorris

Hmm, it's more reading a response from a cookie. I've tried extract_cookies however there are no cookies there. Which makes me think I need to send a cookie and then extract?

Reply 213

J4sonl3e

Original post by danh2002

You only need the ' or 1 = 1
Basically 1=1 always evaluates true so SQL will display everything in the table you don't need to guess table names or columns