[Janus] SQLi challenge #8 - Printable Version

[Janus] SQLi challenge #8 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #8 (/showthread.php?tid=4672831)

[Janus] SQLi challenge #8 - JaNuS18 - Feb 6, 2015

Hi folks,

Here is my challenge #8 of 10 for M"SQLi circle members (open to others too). 🎉

~~~ Tasks~~ ~
- display version with your name
- display list of all tables in primary database with their number of columns
- list should be sorted in descending columns/tables order
- display number of columns in accurate graphics (see proof picture)

~~~ Site~~ ~
aHR0cDovL3d3dy5sZ24uY28ubnovYnJvd3NlL2luZGV4LnBocD9TZWFyY2g9
(Base64 decode it using online decoder like https://www.base64decode.org/)

~~~ Proof~~ ~
[img]http://img4.hostingpics.net/pics/313080challenge8.jpg[/img]

~~~ Rules~~ ~
- you may not use benchmark()
- your injection should work without knowing anything about database/tables/columns on that site

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~~~ Solvers~~ ~
- themastersinner (by PM) ✌

Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7

* - C7H5N3O6 - Feb 6, 2015

Nice challenge...can't post urls and neither pm .---. therefore:

Result:
http(://)i.gyazo.com/b746190a1cd06dfc36ce78dffd70e267.png

Code:
http(://)pastebin.com/uqNNJNgT

* - JaNuS18 - Feb 6, 2015

(Feb 6, 2015 10:39 AM)C7H5N3O6 Wrote: Nice challenge...can't post urls and neither pm .---. therefore:

Result:
http(://)i.gyazo.com/b746190a1cd06dfc36ce78dffd70e267.png
....

Follow ALL tasks. You've forgot the sorting and graphical part.

And why do you post your code 😧 Want to spoil the challenge 🤦‍♂ 🤣

P.S.
BTW you show only some tables ... You should use DIOS

* - themastersinner - Feb 7, 2015

https://i.imgur.com/ZpIJjW4.png

Great challenge. 🤝

* - 7h3_Ph3n0m - Aug 11, 2016

Page not found .Kindly update the link🙂

* - krankenstein - Aug 11, 2016

(Aug 11, 2016 12:13 AM)7h3_Ph3n0m Wrote: Page not found .Kindly update the link🙂

uoɯǝʞod oƃ

* - JaNuS18 - Aug 11, 2016

(Aug 11, 2016 12:13 AM)7h3_Ph3n0m Wrote: Page not found .Kindly update the link🙂

Target updated. Thanks for reporting 🤝

* - 7h3_Ph3n0m - Aug 11, 2016

Welcome 🤝 site is easy to inject but i guess the graph part of the challenge in related to html😶

kindly update POC also 😅

* - JaNuS18 - Aug 11, 2016

(Aug 11, 2016 06:45 AM)7h3_Ph3n0m Wrote: kindly update POC also 😅

Proof picture was already updated (together with target). 😉

* - ra2cod - Aug 12, 2016

Thanks for the Challenge

http[dot]//prnt.sc/c4uaqd

Query PMed , and other things i pm u too .. so please Check it And i am waiting for ur reply 🤝

* - JaNuS18 - Aug 12, 2016

(Aug 12, 2016 06:41 AM)ra2cod Wrote: Thanks for the Challenge
...

Sorry, you are disqualified from all my challenges.

* - ra2cod - Aug 13, 2016

(Aug 12, 2016 07:08 AM)JaNuS18 Wrote: Sorry, you are disqualified from all my challenges.

Well, It's ok if i am disqualified .. Check the PM please .. You know what i want from you :)