- Level: Realistic::2 (Chicago American Nazi Party)
- URL: http://www.hackthissite.org/playlevel/2/
- Difficulty :
- Exercise: Racist pigs are organizing an 'anti-immigrant' rally in Chicago. Help anti-racist activists take over their website!
Message: I have been informed that you have quite admirable hacking skills. Well, this racist hate group is using their website to organize a mass gathering of ignorant racist bastards. We cannot allow such bigoted aggression to happen. If you can gain access to their administrator page and post messages to their main page, we would be eternally grateful.
- Solution: Notice the update.php link at the bottom of the page. Then, use following SQL injection:
' or 'a'='a
in both fields: login and password