[Janus] SQLi challenge #18 - Printable Version

[Janus] SQLi challenge #18 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #18 (/showthread.php?tid=4935517)

[Janus] SQLi challenge #18 - JaNuS18 - Aug 4, 2015

Spoiler (Click to View)

After my hardest challenge so far (#17) here is my new challenge.

~~~ Tasks~~ ~
- display version with your nick name
- report length of shortest column name in primary database
- report how many such columns in primary database exists
- display all such columns (with their tables)

~~~ Target~~ ~
aHR0cDovL2NvbXB1dHV0b3IuY28udWsvYmVlbGl2aW5nMS9wcm9wZXJ0eS5waHA/aWQ9MjU=
(Base64 decode it using online decoder like https://www.base64decode.org/)

~~~ Proof~~ ~
[Image: 642667chal18.jpg]

~~~ Rules~~ ~
- use union select (GET)
- only operator = (is equal)) from comparison operators may be used (others like <, >, <=, >=, <> or != are not allowed)
- group_concat, substring_index, order by and group by are not allowed.
- any variation of DIOS is not allowed
- your injection should work without knowing anything about tables, columns and databases on that site
- don't ask for hints or solution

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~~~ Solvers~~ ~

Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17

* - EachHax - Aug 4, 2015

Are you good with hacking forums, if so then please pm me ur skype! I need ur help mate thnx!

* - SiStemiC - Aug 5, 2015

Very creative challenge. Thanks!

* - techguyresearcher - May 9, 2016

What kind of variation???

* - JaNuS18 - May 9, 2016

(May 9, 2016 08:47 AM)Mohammad Shafoon Ahangar Wrote: What kind of variation???

No DIOS (in any possible form) is allowed

* - techguyresearcher - May 15, 2016

Wt?? No Dios? DIOS SYNTAX BANNED??

* - Inject0r Killer - Aug 13, 2016

Pmed ! Check The Query And Tell ME 🤝

* - JaNuS18 - Aug 13, 2016

(Aug 13, 2016 08:15 PM)Inject0r Killer Wrote: Pmed ! Check The Query And Tell ME 🤝

Sorry, not accepted. You are violating rule #5.

Good luck 👍