Hack Forums
[SQLi challenge #2] pick your dreamgirl [/SQLi challenge #2] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [SQLi challenge #2] pick your dreamgirl [/SQLi challenge #2] (/showthread.php?tid=4059917)

[SQLi challenge #2] pick your dreamgirl [/SQLi challenge #2] - t.pro - Feb 14, 2014

CHALLENGE CLOSED - SITE IS DOWN!

Hey guys,
here a new challenge from Mr.TechProspect 🤭

TARGET:
Code
xxx.mat[HF]chukr[HF]aine.co[HF]m

LEVEL:
medium (a lil bit to do / but basic injection)
good training for nO0bs that read the HF-HQ-Tuts-carefully

RULES:
  • pic a girl and show: ID, NAME, CITY, ENG, VK or EMAIL
    Dreamgirl limitation:
    you have to pic a girl with either email or VK-Link
    *check tasks or proofpic for meaning of rule

  • Dont use: concat() or group_concat() for both use your brain instead 😝

  • Hardcode limitation:
    your command schould work without knowing anything from database except the datapart of your "dreamgirl" (of course you can type in name of columns ONLY FOR THAT PART)

  • Cut off either VK-Link or email from girl (see my proof VK-Link, for email cut off after @) USE SQL FOR CUT OFF!

  • Dont ask for hints, please dont share anything until challenge is closed!



MAIN-TASKS:
  1. show USER,DB,VERSION and Count DB'S without MySQL-Tables

  2. pic your favourite girl and display your fav. picture of her
    (you are allowed to hardcode img tag, and column names of "girlTable" but NOT the DATA itself)

  3. Display a numbered list of all tables in primary DB with a numbered list of columns for each table



PROOF:
[img]http://s25.postimg.org/ov187mtz3/image.jpg[/img]

Send me command via PM (use https://privnote.com/ for that)
post proof!

SOLVERS:
  1. Ajkaro

  2. Renegade18

  3. 133720


cheers and have fun 🎉

CHALLENGE CLOSED - SITE IS DOWN!

* - ajkaro - Feb 14, 2014

[img]http://www.anonmgur.com/up/18f097e72a9ef25b5fabb8f44057db56.jpg[/img]

Thanks for the challenge 🤝

* - t.pro - Feb 14, 2014

Please see the cutoff rule AND the no concat() rule my friend!

* - ajkaro - Feb 14, 2014

(Feb 14, 2014 03:34 PM)t.pro Wrote:  Please see the cutoff rule AND the no concat() rule my friend!

I sent you new syntax with cut off and without concat()

🤝

* - t.pro - Feb 14, 2014

(Feb 14, 2014 04:02 PM)ajkaro Wrote:  I sent you new syntax with cut off and without concat()

that's exactly what i wanted to see! ✌

* - Renegade18 - Feb 15, 2014

[img]http://anonmgur.com/up/8f28d5567c8ed3bb222ad448640df469.png[/img]

* - t.pro - Feb 15, 2014

Great work guys. u both choosed a hot girl!

👍

@all

Renegades Girl has neither a VK Link or Email link (but it is a rule to pick a girl with either email or vk)
He had a query-soloution to inject the data by changing the ID. (btw. nice solution)
That means with renegades query i can click between the id's and data change automatically.
Thats why his proof pic isnt important (or not wrong)!

* - hackersallin - Feb 17, 2014

I am not Good at SQL that much :/
Specially when it comes to these challenges... I cant understand what you guys do to make it write all the tables and stuff.
[img]http://anonmgur.com/up/3e9e17913ad20d4af0f2243254b3bbd7.png[/img]
I could only do this much....
I know the challenge is not complete for me but can you PM me the syntax used to i can learn how to do it?
I will PM you my Syntax.
Thanks for the challenge!

* - 133720 - Feb 18, 2014

Thanks for challenge 😝

[Image: 1623255_404001439744906_1948425519_n.jpg]

* - t.pro - Feb 19, 2014

(Feb 18, 2014 05:25 PM)133720 Wrote:  Thanks for challenge 😝

Congratiolations, added to solvers 👍



CHALLENGE CLOSED - SITE IS DOWN!

.