<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Infinity Exists &#187; Hacking Challenge</title>
	<atom:link href="http://infinityexists.com/category/hacking-challenge/feed/" rel="self" type="application/rss+xml" />
	<link>http://infinityexists.com</link>
	<description>Infinity Exists strives to disclose common hacking methods through easy to understand videos.</description>
	<lastBuildDate>Sun, 25 Apr 2010 16:46:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Sql Injection Challenge How-to</title>
		<link>http://infinityexists.com/2007/11/14/sql-injection-challenge-how-to/</link>
		<comments>http://infinityexists.com/2007/11/14/sql-injection-challenge-how-to/#comments</comments>
		<pubDate>Thu, 15 Nov 2007 04:10:14 +0000</pubDate>
		<dc:creator>Patchy</dc:creator>
				<category><![CDATA[Hacking Challenge]]></category>
		<category><![CDATA[Vblog]]></category>

		<guid isPermaLink="false">http://infinityexists.com/2007/11/14/sql-injection-challenge-how-to/</guid>
		<description><![CDATA[The Sql Injection Challenge has already been completed, so here is a video demonstration on how to find this Sql Injection flaw and exploited it to extract password hashes. In this video I use a firefox plugin &#8216;Data Tamper&#8217; that can be download here &#160; Full Size VideoDownload Here]]></description>
			<content:encoded><![CDATA[The Sql Injection Challenge has already been completed, so here is a video demonstration on how to find this Sql Injection flaw and exploited it to extract password hashes.  In this video I use a firefox plugin &#8216;Data Tamper&#8217; that can be download <a href="https://addons.mozilla.org/en-US/firefox/addon/966">here</a>
<p align="center">&nbsp;</p>

<embed src="http://infinityexists.com/flv/flvplayer.swf" flashvars="&amp;MM_ComponentVersion=1&amp;file=http://infinityexists.com/flv/Vblog%20-%20Sql%20Injection%20Challenge.flv&amp;autoStart=false&amp;autoRewind=false" quality="high" scale="noscale" name="FLVPlayer" salign="LT" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" height="340" width="520"></embed><br /><a href="http://infinityexists.com/videos/sql-injection-challenge-how-to/">Full Size Video</a><br />Download <a href="http://infinityexists.com/wmv/Vblog%20-%20Sql%20Injection%20Challenge.wmv">Here</a>]]></content:encoded>
			<wfw:commentRss>http://infinityexists.com/2007/11/14/sql-injection-challenge-how-to/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Sql Injection Challenge!</title>
		<link>http://infinityexists.com/2007/11/07/sql-injection-challenge/</link>
		<comments>http://infinityexists.com/2007/11/07/sql-injection-challenge/#comments</comments>
		<pubDate>Thu, 08 Nov 2007 04:35:15 +0000</pubDate>
		<dc:creator>Patchy</dc:creator>
				<category><![CDATA[Hacking Challenge]]></category>
		<category><![CDATA[News]]></category>

		<guid isPermaLink="false">http://infinityexists.com/2007/11/07/sql-injection-challenge/</guid>
		<description><![CDATA[I&#8217;m proud to announce the first Infinity Exists&#8217; Hacking Challenge! The challenge is to find a Sql Injection flaw in our forums, and exploit it to extract password hashes. The first person to complete this challenge will receive a free Infinity Exists T-shirt. The Sql Injection vulnerability is hidden deep in Infinity Exists&#8217; forums, and [...]]]></description>
			<content:encoded><![CDATA[I&#8217;m proud to announce the first Infinity Exists&#8217; Hacking Challenge!  The challenge is to find a Sql Injection flaw in our forums, and exploit it to extract password hashes.  The first person to complete this challenge will receive a free Infinity Exists T-shirt.  The Sql Injection vulnerability is hidden deep in Infinity Exists&#8217; forums, and will be much harder to find then the vulnerability demonstrated in Full Disclosure Episode 11.

Tips to help you get started:
<ol>
	<li>Watch Full Disclosure Episode 11!</li>
	<li>Download Wp-Forums Source Code</li>
	<li>The variable that is used to manipulate the Sql Statement is a POST variable.</li>
</ol>
Good Luck!
<br />
<a href="http://infinityexists.com/?page_id=5&amp;forumaction=showposts&amp;forum=15&amp;thread=176&amp;start=0">Discuss Here</a>
<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
<br />
<strong>Update!</strong>
<br />
marcel.romard and esc both won Infinity Exists&#8217; Sql Injection Challenge!!  Marcel.romard found the Sql injection flaw in the forum&#8217;s search that this challenge was based around.  Esc found a Sql Injection flaw that we were unaware of in the forum&#8217;s RSS feed.  Congrats to both of you!]]></content:encoded>
			<wfw:commentRss>http://infinityexists.com/2007/11/07/sql-injection-challenge/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>
