Hack Forums
[Janus] SQLi challenge #13 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #13 (/showthread.php?tid=4790579)



[Janus] SQLi challenge #13 - JaNuS18 - Apr 22, 2015

Here is my (lucky number) challenge #13 🎉

~ Tasks ~
- display text (label) VERSION, database version and your nick name (see proof picture)

~ Target ~
aHR0cDovL3d3dy5jb25kb3JlbnRhbC5jb20ucGgvYWQtZGV0YWlscy5waHA/aWQ9MTM0
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img15.hostingpics.net/pics/74845952c1.jpg[/img]

~ Rules ~
- use union select
- get only
- don't ask for hints or solution

To make challenge more interesting we will add some additional rules:
- word VERSION may not be anywhere in your syntax in any format (ascii, hex, binary, unicode, URL encoded, base64....)
- you may not use any string function

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- benzi

Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12


* - benzi - Apr 23, 2015

thanks for nice one, done.
'VERSION : 5.5.40-36.1 : hf benzi'
pmed you my query.


* - abhilyall - Apr 23, 2015

XPATH syntax error: ':VERSION:5.5.40-36.1:abhilyall'

Sent you my query. Thanks for challenge.


* - JaNuS18 - Apr 23, 2015

(Apr 23, 2015 07:55 AM)abhilyall Wrote:  XPATH syntax error: ':VERSION:5.5.40-36.1:abhilyall'

Sent you my query. Thanks for challenge.

Please read rules:
- use union select
- you may not use string function(s) (concat in your case)

Thanks for your participation 🤝


* - Kashmiri Hunter - May 4, 2016

Master Janus Any Hint Please?


* - 54j1b - May 4, 2016

Thanks Master

' :::::::: VERSION :: 5.5.42-37.1 :: 54j1b :::::::: '

I am New Member in HF . SO I can't Pmed Query .


* - JaNuS18 - May 4, 2016

(May 4, 2016 06:49 AM)Kashmiri Hunter Wrote:  Master Janus Any Hint Please?

See rules 😅




(May 4, 2016 08:09 AM)54j1b Wrote:  Thanks Master

' :::::::: VERSION :: 5.5.42-37.1 :: 54j1b :::::::: '

I am New Member in HF . SO I can't Pmed Query .

Waiting for your PM (when you will be allowed to send it...). Until then I can't evaluate your syntax (and put you on solvers list if you followed all rules...).


* - Inject0r Killer - Sep 9, 2017

Pm sent ... ! THanks 🤝


* - JaNuS18 - Sep 10, 2017

(Sep 9, 2017 08:48 PM)Inject0r Killer Wrote:  Pm sent ... ! THanks 🤝

Re-send. Blocking removed...


* - Inject0r Killer - Sep 10, 2017

(Sep 10, 2017 04:39 AM)JaNuS18 Wrote:  Re-send. Blocking removed...

PM already sent on fb 👍


* - JaNuS18 - Sep 10, 2017

(Sep 10, 2017 05:32 AM)Inject0r Killer Wrote:  PM already sent on fb 👍

OK.

I visit FB just here and there, to answer PMs.


* - Inject0r Killer - Sep 10, 2017

(Sep 10, 2017 06:05 AM)JaNuS18 Wrote:  OK.

I visit FB just here and there, to answer PMs.

😁 Btw sent you here too 😝