+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #5 (/showthread.php?tid=4604012)
Pages: Pages
1
2
[Janus] SQLi challenge #5 - JaNuS18 - Dec 26, 2014
Hi folks,
This is my challenge #5 for advanced injectors. Again, it will be a little harder than previous ones 🎉
- display version with your name
- find total number of all databases
- find total number of tables in all databases
- find total number of columns in all databases
- go trough all databases and find highest and lowest number of tables among all databases
- go trough all databases and find highest and lowest number of columns among all tables in all databases
- go trough all databases and find highest and lowest number of records among all tables in all databases
aHR0cDovL3d3dy5wYW50ZXJhLmNvbS5ici9ub3RpY2lhcy92ZXJub3RpY2lhLnBocD9ub3Q9NQ==
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img4.hostingpics.net/pics/43654018c2.jpg[/img]
- you may not use command count() for finding totals (task 1 - 3)
- don't use database name inf***ormation_schema anywhere in your syntax...).
- in your syntax you should use all three relevant tables: inf***ormation_schema.schemata for data about databases / inf***ormation_schema.tables for data about tables and inf***ormation_schema.columns for data about columns.
- your command should work without knowing anything about databases/tables/columns on that site...
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let's SQL knowledge be with you 👍
- S-x-S
- ra2cod (disqualified from all my challenges)
P.S.
Don't harm the site. 🙃 I choose it only for challenge...
P.P.S
HF is blocking my post because of some commands. Remove * where it occurs
Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
* - Kashmiri Hunter - May 30, 2016
Master Janus I guess The Site is patched.
* - JaNuS18 - May 31, 2016
(May 30, 2016 08:24 PM)Kashmiri Hunter Wrote: Master Janus I guess The Site is patched.
Thanks for reporting it 🤝
New target:
aHR0cDovL3d3dy5tb25zdGVyY29sbGVnZS5pbi9hcnRpY2xlL2FydGljbGUuaHRtbD9hcnRpY2xlPTEy
(Base64 decode it using online decoder like https://www.base64decode.org/)
New proof:
[img]http://img15.hostingpics.net/pics/69626261c1.jpg[/img]
* - Kashmiri Hunter - May 31, 2016
(May 31, 2016 06:51 AM)JaNuS18 Wrote: Thanks for reporting it 🤝
New target:
aHR0cDovL3d3dy5tb25zdGVyY29sbGVnZS5pbi9hcnRpY2xlL2FydGljbGUuaHRtbD9hcnRpY2xlPTEy
(Base64 decode it using online decoder like https://www.base64decode.org/)
New proof:
[img]http://img15.hostingpics.net/pics/69626261c1.jpg[/img]
Master Nothing is working on new target 😭
* - JaNuS18 - Jun 1, 2016
(May 31, 2016 09:20 PM)Kashmiri Hunter Wrote: Master Nothing is working on new target 😭
Then I selected the right site 🤭
* - Kashmiri Hunter - Jun 1, 2016
(Jun 1, 2016 01:17 AM)JaNuS18 Wrote: Then I selected the right site 🤭
hehehehe....
Let Me Try again Master 🤭
Monster Site With Monster Task
* - Kashmiri_Wolf - Jul 17, 2016
Explain 2nd and third rule please
* - JaNuS18 - Jul 18, 2016
(Jul 17, 2016 11:37 PM)Kashmiri_Wolf Wrote: Explain 2nd and third rule please
Rule #2
where database <> "infor***mation_schema"
Here info***rmation_schema is used as name to get other database name. That is not allowed.
You should get all database names with iterating trough info***rmation_schema.schemata --> see rule #3
Rule #3
use:
info***rmation_schema.schemata for databases
info***rmation_schema.tables for tables
info***rmation_schema.columns for tables
All three tables should be used for collecting relevant data on each level (databases/tables/columns)
P.S:
HF is blocking my response with some commands so remove *
* - Kashmiri_Wolf - Jul 19, 2016
(Jun 1, 2016 02:08 AM)Kashmiri Hunter Wrote: hehehehe....
Let Me Try again Master 🤭
Monster Site With Monster Task
Ghazif pai its not hard to inject site but lets try the tasks 😝
(Jun 1, 2016 02:08 AM)Kashmiri Hunter Wrote: hehehehe....
Let Me Try again Master 🤭
Monster Site With Monster Task
hunter pai its not hard to inject site but lets try the tasks 😝
* - S-x-S - Jul 30, 2016
[img]http://img4.hostingpics.net/pics/613992555214475553.png[/img]
👍👍
Thanks for the challenge.
* - JaNuS18 - Jul 30, 2016
(Jul 30, 2016 12:39 PM)S-x-S Wrote: ...
Thanks for the challenge.
👍
See PM and please modify suggested
* - slthrp - Jul 30, 2016
Hello, I am interested in learning about advanced SQL Injection, I know the basics and I would like to learn some more advanced techniques, do you have any suggestions of any good resources for learning?
* - JaNuS18 - Jul 31, 2016
(Jul 30, 2016 09:15 PM)slthrp Wrote: Hello, I am interested in learning about advanced SQL Injection, I know the basics and I would like to learn some more advanced techniques, do you have any suggestions of any good resources for learning?
Read tutorials at www.securityidiots.com.
* - Kashmiri Hunter - Jul 31, 2016
Also See The Threads Of Master Benzi.
* - Kashmiri_Wolf - Aug 4, 2016
http://prntscr.com/c1hvj9
After A Hard Work!!!
Thanks For Challenge Monster 🤝