+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #7 [hard] (/showthread.php?tid=4646829)
[Janus] SQLi challenge #7 [hard] - JaNuS18 - Jan 22, 2015
Hi folks,
Let's continue my serie of challenges. Credits for this challenge go to ajkaro. 🤝
- display numbered list of all databases
- at each database name show number of tables in that database
- after each database display numbered list of tables in that database (start tables numbering with number 1 with each new database)
- at each table name show number of records and columns in that table
- after each table display numbered list of all columns in that table (start columns numbering with number 1 with each new table)
- indent each level (databases/tables/columns) - see proof picture (example with database #2)
aHR0cDovL2luZHVzdHJpYWxpbXBsYXIuY29tLmJyL25vdGljaWFzLWxvb2sucGhwP25vdGljaWE9MQ==
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img4.hostingpics.net/pics/80747030c1.jpg[/img]
- for each level of data (databases/tables/columns) use different colors (for example red/green/blue)
- in your syntax you should iterate trough all three relevant tables: infor***mation_ schema. schemata for data about databases / infor***mation_ schema. tables for data about tables and infor***mation_ schema. columns for data about columns. Other tricks are not allowed 😎
- you may not use benchmark() 😠
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let's SQL knowledge be with you 👍
- Inject0r Killer (disqualified from all my challenges)
P.S.
Don't harm the site. 🙃
Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
* - rootxx - Jan 22, 2015
i really think do i need all this shit in real pentest lel ..
much more fun thing out there other than sqli
http: //i.imgur.com/ zWAQZI6.png
* - JaNuS18 - Jan 22, 2015
(Jan 22, 2015 06:12 AM)rootxx Wrote: i really think do i need all this shit in real pentest lel ..
much more fun thing out there other than sqli
http: //i.imgur.com/ zWAQZI6.png
Anybody is forcing you to take part in challenge? 😧
Some people are doing challenges for fun 😉 Some for experimenting with new syntax. Some enjoy bypassing WAF, some in programming in SQL... 🤝 Some of us have special competition with challenges...
You can also just skip them and ignore them 🤫 It's a free world. Choose what you like... ✌
* - rootxx - Jan 23, 2015
(Jan 22, 2015 11:51 AM)JaNuS18 Wrote: Anybody is forcing you to take part in challenge? 😧
Some people are doing challenges for fun 😉 Some for experimenting with new syntax. Some enjoy bypassing WAF, some in programming in SQL... 🤝 Some of us have special competition with challenges...
You can also just skip them and ignore them 🤫 It's a free world. Choose what you like... ✌
lel and some people really do it for show off 🎉 🎉
thanks better to watch pogo 👍
* - JaNuS18 - Jan 24, 2015
(Jan 23, 2015 06:55 AM)rootxx Wrote: lel and some people really do it for show off 🎉 🎉
thanks better to watch pogo 👍
Yeah, like you know why I am opening challenges.... Like you know our debates via PM... Like you know anything about challenge game I am part of... 🤣
Funny thing to hear something you've said from a person who does the same as I --> open challenges on HF 🤫
Not sure why are you so frustrated so you must comment. Or maybe I am. 🤭
I didn't comment on your challenges. Like your latest #8, where you insisted to inject at specific URL. I could use your own words "I really think do i need all this shit...?". As I injected that site at few different spots. So why did you choose that specific URL? Shall I use your words again: for showing off?
Well I didn't comment anything. Because I don't have any right to tell you what kind of challenge you should or you shouldn't post on HF.
You see the difference between us? 🤝
I will post three more challenges to accomplish my "task" in our (private) challenge game. So please just skip my challenges as you are showing something is bothering you there. What could that be? 🤫 Beside, you have no right to instruct me what should I post at public forum... And for whom. Or why I am posting them... Using your perception every challenge is "showing off" 😏
Over&Out form this LQ discussion with you 🤝
* - syrian thunder - Jan 24, 2015
seems it's hard .. still trying to get the VUL column
* - Inject0r Killer - Aug 31, 2016
All Tasks DOne Just Cant Print Table Rows ! 😭
* - Hi I'm Agreeable - Aug 31, 2016
trying this rn :) 🤩
* - Inject0r Killer - Sep 3, 2016
Check Pm ! Query Pmed ! 🤝
* - JaNuS18 - Sep 3, 2016
(Sep 3, 2016 08:20 AM)Inject0r Killer Wrote: Check Pm ! Query Pmed ! 🤝
Sorry, you violated rule #2
Good luck 👍
* - Inject0r Killer - Sep 13, 2017
https://imgur.com/a/yjp0L
All other things are done just there is some problem with numbering (tables part) 😭
PS :
I am working on it 🤝
Done 🤗 Syntax Sent 🤝
It was really a hard challenge 😭