[JaNuS18]

Hi folks,

This is my challenge #5 for advanced injectors. Again, it will be a little harder than previous ones 🎉

~ Task ~
- display version with your name
- find total number of all databases
- find total number of tables in all databases
- find total number of columns in all databases
- go trough all databases and find highest and lowest number of tables among all databases
- go trough all databases and find highest and lowest number of columns among all tables in all databases
- go trough all databases and find highest and lowest number of records among all tables in all databases

~ Site ~
aHR0cDovL3d3dy5wYW50ZXJhLmNvbS5ici9ub3RpY2lhcy92ZXJub3RpY2lhLnBocD9ub3Q9NQ==
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img4.hostingpics.net/pics/43654018c2.jpg[/img]

~ Rules ~
- you may not use command count() for finding totals (task 1 - 3)
- don't use database name inf***ormation_schema anywhere in your syntax...).
- in your syntax you should use all three relevant tables: inf***ormation_schema.schemata for data about databases / inf***ormation_schema.tables for data about tables and inf***ormation_schema.columns for data about columns.
- your command should work without knowing anything about databases/tables/columns on that site...

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- S-x-S
- ra2cod (disqualified from all my challenges)

P.S.
Don't harm the site. 🙃 I choose it only for challenge...

P.P.S
HF is blocking my post because of some commands. Remove * where it occurs

Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4

[Kashmiri Hunter]

Master Janus I guess The Site is patched.

[JaNuS18]

Master Janus I guess The Site is patched.

Thanks for reporting it 🤝

New target:
aHR0cDovL3d3dy5tb25zdGVyY29sbGVnZS5pbi9hcnRpY2xlL2FydGljbGUuaHRtbD9hcnRpY2xlPTEy
(Base64 decode it using online decoder like https://www.base64decode.org/)

New proof:
[img]http://img15.hostingpics.net/pics/69626261c1.jpg[/img]

[Kashmiri Hunter]

Thanks for reporting it 🤝

New target:
aHR0cDovL3d3dy5tb25zdGVyY29sbGVnZS5pbi9hcnRpY2xlL2FydGljbGUuaHRtbD9hcnRpY2xlPTEy
(Base64 decode it using online decoder like https://www.base64decode.org/)

New proof:
[img]http://img15.hostingpics.net/pics/69626261c1.jpg[/img]

Master Nothing is working on new target 😭

[JaNuS18]

Master Nothing is working on new target 😭

Then I selected the right site 🤭

[Kashmiri Hunter]

Then I selected the right site 🤭

hehehehe....
Let Me Try again Master 🤭

---

Monster Site With Monster Task

[Kashmiri_Wolf]

Explain 2nd and third rule please

[JaNuS18]

Explain 2nd and third rule please

Rule #2
where database <> "infor***mation_schema"

Here info***rmation_schema is used as name to get other database name. That is not allowed.

You should get all database names with iterating trough info***rmation_schema.schemata --> see rule #3

Rule #3
use:
info***rmation_schema.schemata for databases
info***rmation_schema.tables for tables
info***rmation_schema.columns for tables
All three tables should be used for collecting relevant data on each level (databases/tables/columns)

P.S:
HF is blocking my response with some commands so remove *

[Kashmiri_Wolf]

hehehehe....
Let Me Try again Master 🤭

---

Monster Site With Monster Task

Ghazif pai its not hard to inject site but lets try the tasks 😝

---

hehehehe....
Let Me Try again Master 🤭

---

Monster Site With Monster Task

hunter pai its not hard to inject site but lets try the tasks 😝

[S-x-S]

[img]http://img4.hostingpics.net/pics/613992555214475553.png[/img]

👍👍
Thanks for the challenge.

[JaNuS18]

...
Thanks for the challenge.

👍

See PM and please modify suggested

[slthrp]

Hello, I am interested in learning about advanced SQL Injection, I know the basics and I would like to learn some more advanced techniques, do you have any suggestions of any good resources for learning?

[JaNuS18]

Hello, I am interested in learning about advanced SQL Injection, I know the basics and I would like to learn some more advanced techniques, do you have any suggestions of any good resources for learning?

Read tutorials at www.securityidiots.com.

[Kashmiri Hunter]

Also See The Threads Of Master Benzi.

[Kashmiri_Wolf]

http://prntscr.com/c1hvj9
After A Hard Work!!!
Thanks For Challenge Monster 🤝