+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLi challenge (/showthread.php?tid=4562369)
Pages: Pages
1
2
SQLi challenge - JaNuS18 - Nov 30, 2014
- display version with your name
- display all tables from primary database sorted by table records count (descending sort order).
aHR0cDovL3d3dy5sb3djYXJib25saXZlcnBvb2wuY29tL2xpdHRsZV9ncmVlbl9ib29rLnBocD9pZD0x
(Base64 decode it)
![[Image: e6b7c21c0658c5e3683b073aee3b2907.jpg]](https://www.anonimg.com/img/e6b7c21c0658c5e3683b073aee3b2907.jpg)
Spoiler (Click to View)
- use colors,
- group_concat, benchmark and limit are not allowed
Post your solution at https://privnote.com and send me link to it
- themastersinner
Edit:
Site is not vulnerable any more... Closed
* - k44j1gujj4r - Nov 30, 2014
thnxxxxx i think i done so :)
![[Image: gZJ0vB2.jpg?1]](https://i.imgur.com/gZJ0vB2.jpg?1)
* - JaNuS18 - Nov 30, 2014
(Nov 30, 2014 05:07 AM)k44j1gujj4r Wrote: thnxxxxx i think i done so :)
You didn't. 🙃 Sort tables by records count 🤝
Compare my picture with yours...
* - k44j1gujj4r - Nov 30, 2014
got u now ;)
:)
* - themastersinner - Nov 30, 2014
![[Image: zNpiR1f.png]](https://i.imgur.com/zNpiR1f.png)
that was fun 🤝
* - techguyresearcher - Nov 30, 2014
![[Image: BzCdGgF.png]](https://i.imgur.com/BzCdGgF.png)
thanks 4 the Challange MAn......!
* - JaNuS18 - Nov 30, 2014
(Nov 30, 2014 07:53 AM)Mohammad Shafoon Ahangar Wrote:
thanks 4 the Challange MAn......!
Don't use limit. Your injection should work without knowing how many tables there are...
👍
* - c00perzz - Nov 30, 2014
Guys when a challenge is over wouldnt it be good if methods were posted?
* - techguyresearcher - Dec 1, 2014
sOlution Plz?......?
😏
:)
:)
:)
* - JaNuS18 - Dec 2, 2014
(Dec 1, 2014 12:37 AM)Mohammad Shafoon Ahangar Wrote: sOlution Plz?......?
😏
:)
:)
:)
Guys,
sorting records is basic operation in SQL. [img]http://x.hackforums.net/images/modern_bl/images/smilies/oui.gif[/img] How can such easy task stop you? I have more complex tasks on my list for you... [img]http://x.hackforums.net/images/modern_bl/images/smilies/whistle.gif[/img]
With my next few challenges I want to emphasize how important SQL knowledge is for SQL injection. [img]http://x.hackforums.net/images/modern_bl/images/smilies/pirate.gif[/img] This challenge was start of that...
So don't expect challenges where solution is copy/paste DIOS syntax (without understanding it) and trying out few WAF combinations from some list to bypass WAF. Solvers will have to show some SQL knowledge and logic. Good luck [img]http://x.hackforums.net/images/modern_bl/images/smilies/thumbsup.gif[/img]
After some time maybe some tutorials will be made...
* - teknogeek - Jan 12, 2015
I'm quite new to all this. Can't seem to get it to sort by the number of records in each table. Help anyone please?
* - Sahaj - Jan 15, 2015
=====404 not found.....==...... o.O
* - Lamer - Jan 15, 2015
I solved it , the only thing I don't find is "sorted by table records count (descending sort order)"
* - JaNuS18 - Jan 15, 2015
(Jan 15, 2015 02:01 AM)-Eclipse Wrote: =====404 not found.....==...... o.O
[img]http://img4.hostingpics.net/pics/85682939c1.jpg[/img]
* - assassin20051 - Dec 24, 2015
can somebody tell me is the site still vulnerable ? as I am trying to to break the query but it's not giving me any error.
I have tried using ' , - , " but nothing seems to work.
I am still learning SQLi and tried a few basic challenges.