Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Janus] SQLi challenge #7 [hard]

Hi folks,

Let's continue my serie of challenges. Credits for this challenge go to ajkaro. 🤝

~ Tasks ~
- display numbered list of all databases
- at each database name show number of tables in that database
- after each database display numbered list of tables in that database (start tables numbering with number 1 with each new database)
- at each table name show number of records and columns in that table
- after each table display numbered list of all columns in that table (start columns numbering with number 1 with each new table)
- indent each level (databases/tables/columns) - see proof picture (example with database #2)

~ Site ~
aHR0cDovL2luZHVzdHJpYWxpbXBsYXIuY29tLmJyL25vdGljaWFzLWxvb2sucGhwP25vdGljaWE9MQ==
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img4.hostingpics.net/pics/80747030c1.jpg[/img]

~ Rules ~
- for each level of data (databases/tables/columns) use different colors (for example red/green/blue)
- in your syntax you should iterate trough all three relevant tables: infor***mation_ schema. schemata for data about databases / infor***mation_ schema. tables for data about tables and infor***mation_ schema. columns for data about columns. Other tricks are not allowed 😎
- you may not use benchmark() 😠


Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- Inject0r Killer (disqualified from all my challenges)

P.S.
Don't harm the site. 🙃

Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
Janus - SQLi challenges for advanced injectors
i really think do i need all this shit in real pentest lel ..

much more fun thing out there other than sqli

http: //i.imgur.com/ zWAQZI6.png
(Jan 22, 2015 06:12 AM)rootxx Wrote:  i really think do i need all this shit in real pentest lel ..

much more fun thing out there other than sqli

http: //i.imgur.com/ zWAQZI6.png

Anybody is forcing you to take part in challenge? 😧

Some people are doing challenges for fun 😉 Some for experimenting with new syntax. Some enjoy bypassing WAF, some in programming in SQL... 🤝 Some of us have special competition with challenges...

You can also just skip them and ignore them 🤫 It's a free world. Choose what you like... ✌
Janus - SQLi challenges for advanced injectors
(Jan 22, 2015 11:51 AM)JaNuS18 Wrote:  Anybody is forcing you to take part in challenge? 😧

Some people are doing challenges for fun 😉 Some for experimenting with new syntax. Some enjoy bypassing WAF, some in programming in SQL... 🤝 Some of us have special competition with challenges...

You can also just skip them and ignore them 🤫 It's a free world. Choose what you like... ✌

lel and some people really do it for show off 🎉 🎉

thanks better to watch pogo 👍
(Jan 23, 2015 06:55 AM)rootxx Wrote:  lel and some people really do it for show off 🎉 🎉

thanks better to watch pogo 👍

Yeah, like you know why I am opening challenges.... Like you know our debates via PM... Like you know anything about challenge game I am part of... 🤣

Funny thing to hear something you've said from a person who does the same as I --> open challenges on HF 🤫

Not sure why are you so frustrated so you must comment. Or maybe I am. 🤭

I didn't comment on your challenges. Like your latest #8, where you insisted to inject at specific URL. I could use your own words "I really think do i need all this shit...?". As I injected that site at few different spots. So why did you choose that specific URL? Shall I use your words again: for showing off?

Well I didn't comment anything. Because I don't have any right to tell you what kind of challenge you should or you shouldn't post on HF.

You see the difference between us? 🤝

I will post three more challenges to accomplish my "task" in our (private) challenge game. So please just skip my challenges as you are showing something is bothering you there. What could that be? 🤫 Beside, you have no right to instruct me what should I post at public forum... And for whom. Or why I am posting them... Using your perception every challenge is "showing off" 😏

Over&Out form this LQ discussion with you 🤝
Janus - SQLi challenges for advanced injectors
seems it's hard .. still trying to get the VUL column
All Tasks DOne Just Cant Print Table Rows ! 😭
trying this rn :) 🤩
[Image: giphy.gif]
Check Pm ! Query Pmed ! 🤝
(Sep 3, 2016 08:20 AM)Inject0r Killer Wrote:  Check Pm ! Query Pmed ! 🤝

Sorry, you violated rule #2

Good luck 👍
Janus - SQLi challenges for advanced injectors
https://imgur.com/a/yjp0L

All other things are done just there is some problem with numbering (tables part) 😭

PS :
I am working on it 🤝


Done 🤗 Syntax Sent 🤝

It was really a hard challenge 😭


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SkorpFeb 28, 2023 06:06 AM 44 3,021 Feb 28, 2023 06:06 AM
Last Post: vanex4545
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER