+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #17 [hard] (/showthread.php?tid=4890175)
[Janus] SQLi challenge #17 [hard] - JaNuS18 - Jul 2, 2015
Hi folks
My previous challenge #16 was warming up for challenge #17. Challenge #17 is probably my hardest till now... Task in #17 is same as in #16. The only difference is we can use ONLY one SELECT in complete code.
- display numbered list of all databases with table name where maximum and minimum records were found (among all tables from that database) - see proof picture
aHR0cDovL2JyYW50aHdhaXRlY290dGFnZXMuY28udWs=
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img11.hostingpics.net/pics/688810challenge17.jpg[/img]
- use union select (GET)
- you can have max. 1 SELECT statement in your complete syntax (that one used in combination with UNION)
- you can use one local variable but only for numbering databases
- you may not use group_concat
- your injection should work without knowing anything about databases/tables/records on that site
- don't ask for hints or solution
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let's SQL knowledge be with you 👍
-
Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
* - Viktory - Aug 5, 2015
Haha, I wonder where you got this site from =]
* - JaNuS18 - Aug 5, 2015
(Aug 5, 2015 10:06 AM)Viktory Wrote: Haha, I wonder where you got this site from =]
And we both (+ some others) know the answer 😝
It has what I needed for that task...
* - Soham K - Aug 29, 2015
whats the solution ? 🤨
* - b1ack-c0d3 - Oct 23, 2015
can someone please take me through the solution...step by step
i'm still learning and this is where i learn from but some of the tasks are beyond me.
if it's possible can you guys always tutor us through the solutions to every/any task you post ?
thanks
* - JaNuS18 - Oct 26, 2015
(Oct 23, 2015 02:02 AM)b1ack-c0d3 Wrote: can someone please take me through the solution...step by step
It is a challenge, why would people advice you on open challenges 😧