Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Janus] SQLi challenge #2

Here is my new challenge. As I said in my previous challenge I will ask for something more in my challenges, so maybe they are not for newbies... 🙃

~ Task ~
- display version with your name

~ Site ~
aHR0cDovL2lhLWJjLmNvbS9zZXJ2aWNlcy5waHA/aWQ9Mg==​
(Base64 decode it)

~ Proof ~
[Image: 33bb6ac1cd635b22df74365fd8d93fa8.jpg]

~ Rules ~
I will help WAF on that site with additional rule 🤭
- you may not use concat or any other function with character _ in function's name (like concat_ws...)
- post your syntax to https://privnote.com and send me link to PM

~ Solvers ~
- r0ml4h
- benzi
- Aakash Choudhary
- S-x-S
- rawaz karim
- Kashmiri Hunter
- Kashmiri_Wolf

P.S.
Don't harm the site. I choose it only for challenge 👍

Try also my other challenge(s):
janus #1
Janus - SQLi challenges for advanced injectors
[Image: cdSaxOp.jpg]

thanks for challenge
ahaha This is my specialty man. Challenge Accepted ;)
simple, got like 10 solutions for that-
[Image: eaRJs0C.png]
if you cant find somethin to live for, you best find somethin to die for.
(Dec 5, 2014 03:59 PM)Viozaa Wrote:  ahaha This is my specialty man. Challenge Accepted ;)

I hope you didn't forget on me ✌


(Dec 6, 2014 08:41 AM)benzi Wrote:  simple, got like 10 solutions for that-
[Image: eaRJs0C.png]

Great 🎉

One of those 10 solutions you will need in my next challenge #3
Janus - SQLi challenges for advanced injectors
Thanks for the challenge brother.

[Image: fpdwXh1.png]

Actually brother by using concat it was easy and i did with concat. But after see RULES i came to know that concat and _ this one is probhited. So in my mind 3 function come in my mind and i used one of them
But in honest i rarely use those function so my friend helped me to use those function.
Now bro its up to you wheter accept me as solver or not. But one thing is clear i learned that function now
Thanks a lot :)
(Dec 11, 2014 09:18 AM)Aakash Choudhary Wrote:  ...
But one thing is clear i learned that function now

Great. That was the purpose of this challenge. Forcing you to search for new strategies and new knowledge...

Added to solvers 👍
Janus - SQLi challenges for advanced injectors
Any tips on this can't seem to make the vuln tables show a poc would be very nice.
Proof:
mediafire.com/view/dt55qhj8otshkyr/18.PNG
I can't thing of another function that can return a concatenated string. :P, group_concat,concat_ws,concat???
(Jul 6, 2015 02:38 AM)DigitalFood Wrote:  I can't thing of another function that can return a concatenated string. :P, group_concat,concat_ws,concat???

Plenty of them 😉... You need MySQL documentation and little imagination... 👍
Janus - SQLi challenges for advanced injectors
[Image: Clipboard02.jpg]
Thanks
thanks

[Image: uQMUYaA.png]
Thanks For Challenge
My Proof : http[:]//prnt.sc/b191wj
I Can't Send Pm at this time
will send you soon
Thanks For Challenge Master ✌
I cant PM U as I am new here 😭
http[:]//prntscr.com/b1kzfn


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER
by Berry WhiteApr 24, 2020 11:08 AM 4 509 Apr 24, 2020 11:08 AM
Last Post: ApertureSecurity