Sep 25, 2017 01:04 PM
(This post was last modified: Sep 25, 2017 01:08 PM by pishicat_Injector.)
Challenge N4 :: Medium
Hi This Is My Number Four Challenge With You
# Target #
### Task & Rules ###
1 Union Based && GET Method
2- Don't use in your query >>
A- BOF 256 + BOF 512 + BOF 1024 + BOF 2048
B- Use Concat To Get All Information In Rule Number 3
3 Your Name, Version, User, Database
4 Don't Make Any Tutorials
5 Don't Share Your Solution To Each Other
6 Don't Harm Site
7 Send Your Query
8 complete injection should be in the same column
# Proof #
![[Image: TaC1K05.png]](https://i.imgur.com/TaC1K05.png)
# Solvers #
Hi This Is My Number Four Challenge With You
# Target #
PHP Code
<?php
https://pizzacrust.com.pk/deals.php?id=38
### Task & Rules ###
1 Union Based && GET Method
2- Don't use in your query >>
A- BOF 256 + BOF 512 + BOF 1024 + BOF 2048
B- Use Concat To Get All Information In Rule Number 3
3 Your Name, Version, User, Database
4 Don't Make Any Tutorials
5 Don't Share Your Solution To Each Other
6 Don't Harm Site
7 Send Your Query
8 complete injection should be in the same column
# Proof #
![[Image: TaC1K05.png]](https://i.imgur.com/TaC1K05.png)
# Solvers #




![[Image: jRdyqX8.jpg]](https://i.imgur.com/jRdyqX8.jpg)