[t.pro]

CHALLENGE CLOSED - SITE IS DOWN!

Hey guys,
here a new challenge from Mr.TechProspect 🤭

TARGET:

Code

xxx.mat[HF]chukr[HF]aine.co[HF]m

LEVEL:
medium (a lil bit to do / but basic injection)
good training for nO0bs that read the HF-HQ-Tuts-carefully

RULES:

• pic a girl and show: ID, NAME, CITY, ENG, VK or EMAIL
  Dreamgirl limitation:
  you have to pic a girl with either email or VK-Link
  *check tasks or proofpic for meaning of rule
  


• Dont use: concat() or group_concat() for both use your brain instead 😝
  


• Hardcode limitation:
  your command schould work without knowing anything from database except the datapart of your "dreamgirl" (of course you can type in name of columns ONLY FOR THAT PART)
  


• Cut off either VK-Link or email from girl (see my proof VK-Link, for email cut off after @) USE SQL FOR CUT OFF!
  


• Dont ask for hints, please dont share anything until challenge is closed!
  

MAIN-TASKS:

1. show USER,DB,VERSION and Count DB'S without MySQL-Tables
   


2. pic your favourite girl and display your fav. picture of her
   (you are allowed to hardcode img tag, and column names of "girlTable" but NOT the DATA itself)
   


3. Display a numbered list of all tables in primary DB with a numbered list of columns for each table
   

PROOF:
[img]http://s25.postimg.org/ov187mtz3/image.jpg[/img]

Send me command via PM (use https://privnote.com/ for that)
post proof!

SOLVERS:

1. Ajkaro
   


2. Renegade18
   


3. 133720
   

cheers and have fun 🎉

CHALLENGE CLOSED - SITE IS DOWN!

[ajkaro]

[img]http://www.anonmgur.com/up/18f097e72a9ef25b5fabb8f44057db56.jpg[/img]

Thanks for the challenge 🤝

[t.pro]

Please see the cutoff rule AND the no concat() rule my friend!

[ajkaro]

Please see the cutoff rule AND the no concat() rule my friend!

I sent you new syntax with cut off and without concat()

🤝

[t.pro]

I sent you new syntax with cut off and without concat()

that's exactly what i wanted to see! ✌

[Renegade18]

[img]http://anonmgur.com/up/8f28d5567c8ed3bb222ad448640df469.png[/img]

[t.pro]

Great work guys. u both choosed a hot girl!

👍

@all

Renegades Girl has neither a VK Link or Email link (but it is a rule to pick a girl with either email or vk)
He had a query-soloution to inject the data by changing the ID. (btw. nice solution)
That means with renegades query i can click between the id's and data change automatically.
Thats why his proof pic isnt important (or not wrong)!

[hackersallin]

I am not Good at SQL that much :/
Specially when it comes to these challenges... I cant understand what you guys do to make it write all the tables and stuff.
[img]http://anonmgur.com/up/3e9e17913ad20d4af0f2243254b3bbd7.png[/img]
I could only do this much....
I know the challenge is not complete for me but can you PM me the syntax used to i can learn how to do it?
I will PM you my Syntax.
Thanks for the challenge!

[133720]

Thanks for challenge 😝

[t.pro]

Thanks for challenge 😝

Congratiolations, added to solvers 👍

---

CHALLENGE CLOSED - SITE IS DOWN!

.