Hack Forums
[SQLI] Advanced challenge #9 [SQLI] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: [SQLI] Advanced challenge #9 [SQLI] (/showthread.php?tid=5554512)

Pages: Pages 1 2


[SQLI] Advanced challenge #9 [SQLI] - •^v^–[ bLacKn3x ]–^v^• - Feb 18, 2017

Hi guys,
today a new challenge by me


Target
aHR0cDovL3d3dy5yZXJpa2VyaGV1bGJvamVuLmRlL19jb250ZW50L3Rlcm1pbl9pY3MucGhwP3Rlcm1pbl9pZD02NDk=

proofpic
Spoiler (Click to View)

Rules && Tasks
Use Union Method only
Don't change Target link or parameter !
Print HF Name,User,daabase,version and operating system
print Table count of Main DB
print header & datetime from News table
- numering in ascending order
- show header & datetime in descending order
- only from year 2016
Do not harm the website
Pm me your query and post here ypur proofpic


Solver


🤝🤝🤝



* - Kashmiri Hunter - Feb 18, 2017

print header & datetime from News table
- numering in ascending order
- show header & datetime in descending order
- only from year 2016

Nice Task 👍

Will Give it a try ASAP.


* - •^v^–[ bLacKn3x ]–^v^• - Feb 18, 2017

(Feb 18, 2017 09:40 AM)Kashmiri Hunter Wrote:  Nice Task 👍

He he thanks
Ihope you have fun br0.

Peace


* - Kashmiri Wolf - Feb 18, 2017

Bro Can You Please Clear It
- show header & datetime in descending order

In Descending Order According To Length Or Date ??
Thanks 🤝


prntscr.com/eakl31

Thanks Will Pm You Query SOon !


* - •^v^–[ bLacKn3x ]–^v^• - Feb 19, 2017

(Feb 18, 2017 08:37 PM)Kashmiri Wolf Wrote:  Bro Can You Please Clear It
- show header & datetime in descending order

In Descending Order According To Length Or Date ??
Thanks 🤝


prntscr.com/eakl31

Thanks Will Pm You Query SOon !

Simply look on my proofpic. Its not difficult

Pm me your query @kashmiri wolf


* - Kashmiri Wolf - Feb 19, 2017

(Feb 19, 2017 12:09 AM)Blacknex158 Wrote:  Pm me your query @kashmiri wolf

Its Not That Hard But I Cant Pm You Query

PS :
Already Told Its New Id I Cant Pm Yet ! Low Posts


* - Kashmiri Hunter - Feb 19, 2017

I Think I've Done It 🤭

http://prnt.sc/ealqjy


Thanks 🤝


* - •^v^–[ bLacKn3x ]–^v^• - Feb 19, 2017

(Feb 19, 2017 12:36 AM)Kashmiri Wolf Wrote:  Its Not That Hard

Lol its for newbies...

Added NEW to Solver :
Kashmiri Hunter 🤝


* - Kashmiri Wolf - Feb 19, 2017

(Feb 19, 2017 01:30 AM)Blacknex158 Wrote:  Lol its for newbies...

I know That ....
PS :
I Am Also Newbie 😝


* - •^v^–[ bLacKn3x ]–^v^• - Feb 19, 2017

(Feb 19, 2017 01:39 AM)Kashmiri Wolf Wrote:  I Am Also Newbie 😝
✌


* - StyleShit - Feb 19, 2017

It can be done without downloading the file?
(I'm sure that everyone who did the challenge will understand)


* - Kashmiri Wolf - Feb 19, 2017

(Feb 19, 2017 06:59 AM)StyleShit Wrote:  It can be done without downloading the file?
(I'm sure that everyone who did the challenge will understand)

Yeah It Can Be Done Without Downloading The FIle on same injection point

prntscr.com/eao461 -->see this


* - StyleShit - Feb 19, 2017

(Feb 19, 2017 07:58 AM)Kashmiri Wolf Wrote:  Yeah It Can Be Done Without Downloading The FIle on same injection point

prntscr.com/eao461 -->see this

Damn... 👹
thnx 🤝


* - Nik321 - Feb 19, 2017

Soooo I injected the url... This is actually the first ever MySQL challenge I have ever done... Not to sure what it is i am going after though...

I can tell you the following and let me know if I was correct?

Spoiler (Click to View)


* - StyleShit - Feb 19, 2017

hmm.. that sucks..
i dont know how to change the order...

prntscr.com/eari94


never mind, done...
prntscr.com/easkvy

-- can't send you pm, i'm new...