Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
Post the site and we might be able to help you.
Use: https://www.base64encode.org/
Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable
Oct 11, 2017 06:00 AM
(This post was last modified: Oct 11, 2017 06:03 AM by c0sm1k.)
You have to use %23 to end the comments with or screen goes blank..
Code id=20' order by 13%23 sql error on screen
id=20' order by 14%23 screen goes blank
hope this helps ✌
Oct 11, 2017 11:47 AM
(This post was last modified: Oct 11, 2017 12:32 PM by JaNuS18.)
(Oct 10, 2017 10:44 PM)Berry White Wrote: Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
use:
PHP Code
<?php syntax deleted by request
version: 5.5.55-cll
P.S:
OP contact me by PM when you will have rights to do it...
Janus - SQLi challenges for advanced injectors
DO NOT DEAL WITH THIS MEMBER
Oct 11, 2017 12:48 PM
(This post was last modified: Oct 11, 2017 12:50 PM by pishicat_Injector.)
(Oct 10, 2017 11:35 PM)Berry White Wrote: Here it is mate,
aHR0cDovL3d3dy5zbG9ib2Rub3NycHNraS5jb20vaW5kZXgucGhwP2plemlrPXNyJm1lbmlfbGlua19pZD0yMA==
meni_link_id parameter is vulnerable
WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
Oct 11, 2017 01:43 PM
(This post was last modified: Oct 11, 2017 01:45 PM by JaNuS18.)
(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote: WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
Sure, after I posted my syntax, you will explain it 😝 🤦♂ Story of your life...
P.S.
My syntax was later removed by request as it is used in a challenge
Janus - SQLi challenges for advanced injectors
DO NOT DEAL WITH THIS MEMBER
Oct 11, 2017 01:53 PM
(This post was last modified: Oct 11, 2017 01:55 PM by pishicat_Injector.)
(Oct 11, 2017 01:43 PM)JaNuS18 Wrote: Sure, after I posted my syntax, you will explain it 😝 🤦♂ Story of your life...
P.S.
My syntax was later removed by request as it is used in a challenge
first: mr JaNuS18 I swear I have not seen your syntax , I am a Muslim and I never lie 👍
Second: mr JaNuS18 wait to see my Work to see it's not your work 😝
I hope not only between us except good work
Regards Mr JaNuS18 🤝
Oct 11, 2017 02:35 PM
(This post was last modified: Oct 11, 2017 02:54 PM by Berry White.)
(Oct 11, 2017 11:47 AM)JaNuS18 Wrote: use:
PHP Code
<?php syntax deleted by request
version: 5.5.55-cll
P.S:
OP contact me by PM when you will have rights to do it...
Janus can u pm me ?
(Oct 11, 2017 12:48 PM)pishicat_Injector Wrote: WOW, I notic this post now, it's a hot site, I will Write a lesson explaining the method of injecting this site after a little special to you dear 👍
Thank you
(Oct 11, 2017 06:00 AM)c0sm1k Wrote: You have to use %23 to end the comments with or screen goes blank..
Code id=20' order by 13%23 sql error on screen
id=20' order by 14%23 screen goes blank
hope this helps ✌
Well i found 13 columns too, but thats not problem...
I found 6 columns too with ;%00
But no output or The used SELECT statements have a different number of columns, thats the problem xD but thanks for trying, i appreciate that mate <3
DO NOT DEAL WITH THIS MEMBER
(Oct 10, 2017 10:44 PM)Berry White Wrote: Hey guys, im not strange with sqli, but there is some injections i cant inject but im sure they are vulnerable on union based... If some masters like janus can help me to inject this one site, i would be grateful
Many thanks in advance
Here You Go My Frind The Solution For You My Dear😁
PHP Code
<?php https://hackforums.net/showthread.php?tid=5735331
Oct 11, 2017 07:42 PM
(This post was last modified: Oct 11, 2017 07:44 PM by Berry White.)
(Oct 11, 2017 05:57 PM)pishicat_Injector Wrote: Here You Go My Frind The Solution For You My Dear😁
Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow
PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance
DO NOT DEAL WITH THIS MEMBER
Oct 11, 2017 08:09 PM
(This post was last modified: Oct 11, 2017 08:12 PM by pishicat_Injector.)
(Oct 11, 2017 07:42 PM)Berry White Wrote: Well, thanks but u shouldnt type real site name, because probably someone will use it for bad purposes...
I was curious for solution, but somebody is going to be skiddie and deface site... you should set just something like example[dot]com,but thanks anyhow
PS:
Also, can u add when exactly are we supposed to use NULLIF ? Thanks in advance
why you don't say that to me in facebook in account Berry White Or here when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶
(Oct 11, 2017 08:09 PM)pishicat_Injector Wrote: why you don't say that to me in facebook when I say to you I will make tut for you, if I do that now what about the Image the site in my Image so what you need from me now I delet my tut, that Which took me a great time to prepare for you? 😶
Dude first of all i didnt expect that u will type real website name...
Second, u didnt wrote this for me, u wrote it because yourself on some way :)
And third, i dont need you to delete tut, i just asked to remove website name
DO NOT DEAL WITH THIS MEMBER
Oct 11, 2017 08:46 PM
(This post was last modified: Oct 12, 2017 12:15 AM by pishicat_Injector.)
----------------------------------------------------------------------------------------------------------
(Oct 11, 2017 08:46 PM)pishicat_Injector Wrote: who you say that 😶
I don't need your site to add tut here in this section I have six Tutorial written for this section already, Just a matter of time on publication .
I spent a lot of time writing the subject just to help you not to my self 😠 as you say
Any way cuz you see this Tut It's for my self not for you my brother , I love to say to you I don't need it 😧 cuz I know all thing that Posted in this topic, So this Tut Is Deleted
Regards 🤝
You have? Then why u didnt set other website name, but this?
U could just change website name because its same injection method..
And i mean, its not specificaly for you tutorial, but for others , so you gain rep+
|