+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #16 (/showthread.php?tid=4865917)
[Janus] SQLi challenge #16 - JaNuS18 - Jun 15, 2015
- display version with your nick name, database and user
- display list of databases with maximum and minimum records found among all tables within each database
aHR0cDovL3d3dy5jbmN0LnRn
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img11.hostingpics.net/pics/71301166c1.jpg[/img]
- use union select (GET)
- you can have max 2 SELECT statements in your complete syntax (plus additional one used in starting UNION SELECT)
- you may not use any local variable or command LIMIT or SUBSTRING_INDEX
- your injection should work without knowing anything about databases/tables on that site
- don't ask for hints or solution
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let's SQL knowledge be with you 👍
- iHacker-n00b
- shafoon
Edit:
URL is not SQLi vulnerable any more...
Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
* - SiStemiC - Jun 16, 2015
Dude that's way too hard! I sweat just by looking at the rules...
* - JaNuS18 - Jun 22, 2015
(Jun 16, 2015 02:25 PM)SiStemiC Wrote: Dude that's way too hard! I sweat just by looking at the rules...
Well it require some thinking 😉
Hard will be my next challenge #17 with same task but with only one SELECT allowed (that one in combination with UNION) 🎉
* - m4rk0n - Jul 16, 2015
![[Image: Clipboard02017cc.jpg]](https://www.anony.ws/i/2015/07/16/Clipboard02017cc.jpg)
Just the injection part.
* - JaNuS18 - Jul 16, 2015
(Jul 16, 2015 09:36 AM)m4rk0n Wrote:
Just the injection part.
I don't see any picture and you didn't send any syntax, so I can't evaluate...
* - m4rk0n - Jul 16, 2015
(Jul 16, 2015 01:44 PM)JaNuS18 Wrote: I don't see any picture and you didn't send any syntax, so I can't evaluate...No problem. No need to evaluate. Just doin' it for fun. And I see the pic btw.
* - JaNuS18 - Jul 16, 2015
(Jul 16, 2015 02:32 PM)m4rk0n Wrote: No problem. No need to evaluate. Just doin' it for fun. And I see the pic btw.
OK
P.S.
That is how I see your picture
[img]http://img15.hostingpics.net/pics/23493238c2.jpg[/img]
* - m4rk0n - Jul 16, 2015
(Jul 16, 2015 03:25 PM)JaNuS18 Wrote: OK
P.S.
That is how I see your picture
[img]http://img15.hostingpics.net/pics/23493238c2.jpg[/img]
Strange. this is the link:
https://www.anony.ws/i/2015/07/16/Clipboard02017cc.jpg
* - Inject0r Killer - Aug 13, 2016
Site Patched I Guess .... Update The Target Master 🤝
* - JaNuS18 - Aug 13, 2016
(Aug 13, 2016 09:27 PM)Inject0r Killer Wrote: Site Patched I Guess .... Update The Target Master 🤝
I already made a notice about that (05-20-2016).
See Edit section in opening post. 🤝
Challenge closed.