[JaNuS18]

Hi folks,

This is my challenge #3. Previous two were basic for advanced injectors. We were sorting data in DIOS output in searching alternatives for concatenating data there. After that warming up it is time to go to next level 🎉

~ Task ~
- display version with your name
- display numbered list of all tables in primary database (one table per row)

~ Site ~
aHR0cDovL3d3dy5jaG5yaS5vcmcvcHJvZmlsZS5waHA/cHJvZmlsZUlkPTIzODk=​
(Base64 decode it)

~ Proof ~
[img]http://img15.hostingpics.net/pics/42028814c1.jpg[/img]

As this challenge is harder I will force you to change your usual injections - see rules bellow.
~ Rules ~
- complete injection must be done in one vulnerable column
- you may not use concat or any other function with character _ in function's name (like group_concat...)
- you may not use function IN() or Benchmark()
- in your complete syntax command from may be used only once
- your command should work without knowing anything about databases/tables on that site...

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- r0ml4h
- iHacker-n00b
- sweetoow
- Aakash Choudhary
- S-x-S
-Kashmiri_Wolf
- delwaralam

P.S.
Don't harm the site. 🙃 I choose it only for challenge...

Try also my other challenges:
janus #1
janus #2

[iHacker-n00b]

Hello Everyone Exams Over xD Thnx For The Challenge

[Aakash Choudhary]

Fucking Redirection. well done simple injection. Time to done with RULES

[r0ml4h]

hey bro, can you check your website, because i get error like this

thanks god, error is gone, i spent 4 hours to build my query and all will be in vain if website target going error



thanks for challenge

[Lamer]

LOL this is part of the challenge , try order by 10 you will see no redirection, after for rules things without "_" etc Idk how to solve

[JaNuS18]

Hello Everyone Exams Over xD Thnx For The Challenge

You may not use any function with character _ in its name (group_concat, make_set...)...

See the rules!

---

nice one, done.

I can't evaluate you as a solver without seeing your syntax🤝

[Lamer]

benzi never send syntax, he think he has rights over people.....:)

[iHacker-n00b]

You may not use any function with character _ in its name (group_concat, make_set...)...

See the rules!

oops! Sorry :P
Check Now,


Use of From - Once
No Use of Function having '_'
Result in One Column..
I Believe I Cleared This :P

[JaNuS18]

I can't edit first post any more so results are here:

Solvers:
- r0ml4h
- iHacker-n00b

🎉

[iHacker-n00b]

I can't edit first post any more so results are here:

Solvers:
- r0ml4h
- iHacker-n00b (not injected in one column, partial solver)

🎉

Na! :3 Check Pm Now :P I Injected in One Column :v

[JaNuS18]

Na! :3 Check Pm Now :P I Injected in One Column :v

Solvers list updated after you corrected your syntax. 🤝

Rules are there to follow them Rahul. Or skip the challenge. 🤫

I am fair to all equally. 😉

[sweetoow]

Nice challenge..

[8lack]

Anyone give me query plz.. am trying but.fail..coz i am noob :(
My mail: [email protected]

[JaNuS18]

Solvers list is updated:

Solvers:
- r0ml4h
- iHacker-n00b
- sweetoow
- Aakash Choudhary

👍

[Aakash Choudhary]

Very nice challenge brother.
Because of your challenge [ mainly RULES ] i learned DIOS almost in that function.But once again my brother help me to understand that DIOS in that function.
Almost i learned because i am still understanding this DIOS in that function and will do more practice till i become perfect to handle that function
Thanks
Here is my proof



Thank you very much once again 🤝 🤝 🤝

---

I honestly accepted that i took help. So forgive me. Thanks