[JaNuS18]

Spoiler (Click to View)MensaSQLi circle, session 2(1)

After my hardest challenge so far (#17) here is my new challenge.

~ Tasks ~
- display version with your nick name
- report length of shortest column name in primary database
- report how many such columns in primary database exists
- display all such columns (with their tables)


~ Target ~
aHR0cDovL2NvbXB1dHV0b3IuY28udWsvYmVlbGl2aW5nMS9wcm9wZXJ0eS5waHA/aWQ9MjU=
(Base64 decode it using online decoder like https://www.base64decode.org/)


~ Proof ~



~ Rules ~
- use union select (GET)
- only operator = (is equal)) from comparison operators may be used (others like <, >, <=, >=, <> or != are not allowed)
- group_concat, substring_index, order by and group by are not allowed.
- any variation of DIOS is not allowed
- your injection should work without knowing anything about tables, columns and databases on that site
- don't ask for hints or solution

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍


~ Solvers ~


Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17

[EachHax]

Are you good with hacking forums, if so then please pm me ur skype! I need ur help mate thnx!

[SiStemiC]

Very creative challenge. Thanks!

[techguyresearcher]

What kind of variation???

[JaNuS18]

What kind of variation???

No DIOS (in any possible form) is allowed

[techguyresearcher]

Wt?? No Dios? DIOS SYNTAX BANNED??

[Inject0r Killer]

Pmed ! Check The Query And Tell ME 🤝

[JaNuS18]

Pmed ! Check The Query And Tell ME 🤝

Sorry, not accepted. You are violating rule #5.

Good luck 👍