[Baba Yaga]

So this is my first thread on this site. Hope you all enjoy :)

Would like to give credit to @Incapability for posting some awesome sites that are vulnerable to SQL injection.
Would also like to thank @SiStemiC for the posting layout.

This is an easy SQLi challenge:
-Firstly decode this hash (base64 encoded):

aHR0cDovL3d3dy5hbnRpcXVlc2luY2FuYWRhLmNvbS9zaG9wLnBocD9teUlEPTQ5Ng==

Task:
-Write your name next to tables

Rules:
-Don't destroy the site.
-Don't write any links here.
-I won't give any hints. It's not that hard...

Proof:
aHR0cDovL2ltZ3VyLmNvbS85bDNpd3VD (base64 encoded because I can't post pictures/links;too few post count)

Solvers Hall of Fame:

[SiStemiC]

Dude, you copied my layout. At least thank me.
Thanks for the challenge:
Spoiler (Click to View)

[JaNuS18]

thanks

[img]http://img11.hostingpics.net/pics/48748466c2.jpg[/img]

[john12]

Very easy.



Thanks.

[phammydung]

Thanks for the challenge. Check your inbox.

farm6.staticflickr.com/5725/20928440211_4cf618fbd7_o.jpg

[-zERAiT]

Thank you.

[Baba Yaga]

Dude, you copied my layout. At least thank me.
Thanks for the challenge:

Sorry, will edit my post accordingly

[S-x-S]

Proof:
mediafire.com/view/56ucd86m6eakyy0/28.PNG

[SiStemiC]

Sorry, will edit my post accordingly

No problem man, keep making awesome challenges.

[iHeal]

Thanks OP

[pr0xY_punK]

I've been learning SQLi over the past week, so I'm a bit new to this. I know how to find the Columns and Tables by hand but have not figured out how to add my name next to the Tables. Could someone send me a quick PM on how to do this? Thanks! 😁

[IDK]

I've been learning SQLi over the past week, so I'm a bit new to this. I know how to find the Columns and Tables by hand but have not figured out how to add my name next to the Tables. Could someone send me a quick PM on how to do this? Thanks! 😁

Code

GROUP_CONCAT(0x526564203a,table_name)

0x526564203a = Red :

use hackbar to convert your name into hex 🤝

[JaNuS18]

Code

GROUP_CONCAT(0x526564203a,table_name)

0x526564203a = Red :

use hackbar to convert your name into hex 🤝

I suppose you don't want your name as a prefix of every table name, so better to use Concat() for concatenation of two or more strings... 👍

[IDK]

I suppose you don't want your name as a prefix of every table name, so better to use Concat() for concatenation of two or more strings... 👍

😅😅🎉

Task:
-Write your name next to tables

[JaNuS18]

😅😅🎉

Sorry, I am blind (didn't see that request in post) 😊 😵