Hack Forums
[Janus] SQLi challenge #2 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #2 (/showthread.php?tid=4570539)

[Janus] SQLi challenge #2 - JaNuS18 - Dec 5, 2014

Here is my new challenge. As I said in my previous challenge I will ask for something more in my challenges, so maybe they are not for newbies... 🙃

~ Task ~
- display version with your name

~ Site ~
aHR0cDovL2lhLWJjLmNvbS9zZXJ2aWNlcy5waHA/aWQ9Mg==​
(Base64 decode it)

~ Proof ~
[Image: 33bb6ac1cd635b22df74365fd8d93fa8.jpg]

~ Rules ~
I will help WAF on that site with additional rule 🤭
- you may not use concat or any other function with character _ in function's name (like concat_ws...)
- post your syntax to https://privnote.com and send me link to PM

~ Solvers ~
- r0ml4h
- benzi
- Aakash Choudhary
- S-x-S
- rawaz karim
- Kashmiri Hunter
- Kashmiri_Wolf

P.S.
Don't harm the site. I choose it only for challenge 👍

Try also my other challenge(s):
janus #1

* - r0ml4h - Dec 5, 2014

[Image: cdSaxOp.jpg]

thanks for challenge

* - Viozaa - Dec 5, 2014

ahaha This is my specialty man. Challenge Accepted ;)

* - benzi - Dec 6, 2014

simple, got like 10 solutions for that-
[Image: eaRJs0C.png]

* - JaNuS18 - Dec 9, 2014

(Dec 5, 2014 03:59 PM)Viozite Wrote:  ahaha This is my specialty man. Challenge Accepted ;)

I hope you didn't forget on me ✌

(Dec 6, 2014 08:41 AM)benzi Wrote:  simple, got like 10 solutions for that-
[Image: eaRJs0C.png]

Great 🎉

One of those 10 solutions you will need in my next challenge #3

* - Aakash Choudhary - Dec 11, 2014

Thanks for the challenge brother.

[Image: fpdwXh1.png]

Actually brother by using concat it was easy and i did with concat. But after see RULES i came to know that concat and _ this one is probhited. So in my mind 3 function come in my mind and i used one of them
But in honest i rarely use those function so my friend helped me to use those function.
Now bro its up to you wheter accept me as solver or not. But one thing is clear i learned that function now
Thanks a lot :)

* - JaNuS18 - Dec 11, 2014

(Dec 11, 2014 09:18 AM)Aakash Choudhary Wrote:  ...
But one thing is clear i learned that function now

Great. That was the purpose of this challenge. Forcing you to search for new strategies and new knowledge...

Added to solvers 👍

* - AcidKiller - Dec 16, 2014

Any tips on this can't seem to make the vuln tables show a poc would be very nice.

* - S-x-S - Jul 5, 2015

Proof:
mediafire.com/view/dt55qhj8otshkyr/18.PNG

* - DigitalFood - Jul 6, 2015

I can't thing of another function that can return a concatenated string. :P, group_concat,concat_ws,concat???

* - JaNuS18 - Jul 6, 2015

(Jul 6, 2015 02:38 AM)DigitalFood Wrote:  I can't thing of another function that can return a concatenated string. :P, group_concat,concat_ws,concat???

Plenty of them 😉... You need MySQL documentation and little imagination... 👍

* - m4rk0n - Jul 13, 2015

[Image: Clipboard02.jpg]
Thanks

* - rawaz karim - Jul 14, 2015

thanks

[Image: uQMUYaA.png]

* - Kashmiri Hunter - May 7, 2016

Thanks For Challenge
My Proof : http[:]//prnt.sc/b191wj
I Can't Send Pm at this time
will send you soon

* - Kashmiri_Wolf - May 7, 2016

Thanks For Challenge Master ✌
I cant PM U as I am new here 😭
http[:]//prntscr.com/b1kzfn