+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #9 (/showthread.php?tid=4702557)
[Janus] SQLi challenge #9 - JaNuS18 - Feb 24, 2015
Hi folks,
Here is my challenge #9 of 10 for M"SQLi circle members (open to others too). 🎉
- display top 5 tables with their records count
- use colors
aHR0cHM6Ly93d3cubGluZGFrYW1taW5zLmNvbS9jaGVja291dC5waHA/Y2F0aWQ9MTEmY2hlY2tjaG9vc2VyPWNoZWNrb3V0JnNpZD1hZmJlNjk3Y2M2ZjBmNjRiMDEzMzEzYTY1NzIzMjE5Mw==
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img15.hostingpics.net/pics/92202691c5.jpg[/img]
- union select
- don't use limit, lpad, rpad (new rule)
- your injection should work without knowing anything about tables/records on that site
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let's SQL knowledge be with you 👍
- Kashmiri_Wolf (by old rules)
- Kashmiri Hunter (by old rules)
- Inject0r Killer
Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
* - syrian thunder - Feb 24, 2015
seems kind of hard ..tired trying today .. will continue tomorrow
* - Kashmiri_Wolf - May 29, 2016
http://prntscr.com/ba0o4n
Thanks 🤝
* - Kashmiri Hunter - May 29, 2016
(May 29, 2016 06:51 PM)Kashmiri_Wolf Wrote: http://prntscr.com/ba0o4n
Thanks 🤝
Soon I will be Solver 🤗
* - Kashmiri_Wolf - May 30, 2016
(May 29, 2016 07:23 PM)Kashmiri Hunter Wrote: Soon I will be Solver 🤗
I Know U Are Leet 🎉
* - JaNuS18 - May 30, 2016
(May 29, 2016 07:23 PM)Kashmiri Hunter Wrote: Soon I will be Solver 🤗
(May 30, 2016 08:43 AM)Kashmiri_Wolf Wrote: I Know U Are Leet 🎉
Both added to solvers. 👍
P.S.
New rule added...
* - Inject0r Killer - Aug 9, 2016
prntscr.com/c3hong
Can't Pm You Now Will Pm You Soon 🤝
* - JaNuS18 - Aug 9, 2016
(Aug 9, 2016 04:56 AM)Inject0r Killer Wrote: prntscr.com/c3hong
Can't Pm You Now Will Pm You Soon 🤝
You are using functions which are breaking rule #3
Please modify your syntax. 👍
* - Inject0r Killer - Aug 9, 2016
(Aug 9, 2016 08:29 AM)JaNuS18 Wrote: You are using functions which are breaking rule #3
Please modify your syntax. 👍
Ok Sir I Will Try 🤝
* - Inject0r Killer - Aug 11, 2016
Check Pm ... Query Sent !! 🤝
* - JaNuS18 - Aug 11, 2016
(Aug 11, 2016 04:41 AM)Inject0r Killer Wrote: Check Pm ... Query Sent !! 🤝
You are still violating rule #3.
Good luck 👍