+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [Janus] SQLi challenge #19 (/showthread.php?tid=4973924)
[Janus] SQLi challenge #19 - JaNuS18 - Sep 3, 2015
Spoiler (Click to View)
- display version with your nick name
- display last 5 tables in each database (like on proof picture)
aHR0cDovL3d3dy5hbG11bmFmLmNvbS9wcm9kdWN0cy5waHA/Y2F0PTUwMDEmc2lkPTEwMDU=
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img11.hostingpics.net/pics/588576challenge19.jpg[/img]
- use regular DIOS (no benchmark allowed)
- don't use SUBSTRING_INDEX for extraction of tables
- you may not control table output with (visible or hidden) tables numbering via local variable
- solution should be pure SQL
- your syntax should work without knowing anything about databases or tables on that site
- don't ask for hints or solution
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let SQL knowledge be with you 👍
-
Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17
janus #18
* - krankenstein - Sep 5, 2015
query pmed and Bro Can u plz share this dios with me(i am a noob,ur dios is looking different👍👍)
![[Image: tU57iBg.png]](https://i.imgur.com/tU57iBg.png)
* - dingdog7 - Sep 5, 2015
(Sep 5, 2015 02:44 PM)krankenstein Wrote: query pmed and Bro Can u plz share this dios with me(i am a noob,ur dios is looking different👍👍)How do i do what you do 😭
[img]
* - JaNuS18 - Sep 8, 2015
(Sep 5, 2015 02:44 PM)krankenstein Wrote: ...dios is looking different
Because required tasks are different as you did...
* - krankenstein - Sep 8, 2015
(Sep 8, 2015 03:58 PM)JaNuS18 Wrote: Because required tasks are different as you did...yes Boss, i confess my surrender 😵😵
* - Lovesosa - Sep 9, 2015
i am an noob in this so i am gonna try this out
* - JaNuS18 - Sep 12, 2015
(Sep 9, 2015 02:01 AM)Mitzz Wrote: i am an noob in this so i am gonna try this out
You are welcome. Good luck 👍
* - dafr34k - Dec 11, 2015
i'm a very much noob in sqli, couldn't complete the challenge properly 🤮 could you help me with your dios buddy ? 😉 http(:)//i.imgur.com/5CBhct2.png
cant post link here btw ..
* - JaNuS18 - Dec 12, 2015
(Dec 11, 2015 04:33 PM)dafr34k Wrote: i'm a very much noob in sqli, couldn't complete the challenge properly 🤮 could you help me with your dios buddy ? 😉 http(:)//i.imgur.com/5CBhct2.png
cant post link here btw ..
If you describe yourself as a noob in SQLi maybe you should start with easier SQLi challenges first. Also there is a challenge rule made by purpose: don't ask for hints
Good luck with SQLi 👍
* - Pepeillo - Dec 12, 2015
Thx for sharing this content. very nice!!
* - V_4_Vendetta - Dec 12, 2015
good challenge .. tnx.
http(:)//sm.uploads.im/t/UjFNu.jpg
http(:)//uploads.im/UjFNu.jpg
no perm... email ?
* - JaNuS18 - Dec 12, 2015
(Dec 12, 2015 03:18 PM)V_4_Vendetta Wrote: good challenge .. tnx.
http(:)//sm.uploads.im/t/UjFNu.jpg
http(:)//uploads.im/UjFNu.jpg
no perm... email ?
Please correct your syntax and follow the rule: your syntax should work without knowing anything about databases
Thanks for trying. Good luck 👍
* - SAJIB MODAK - Dec 20, 2015
solution please .........................................