Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › [Janus] SQLi challenge #9

Thread Closed 

[Janus] SQLi challenge #9
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Feb 24, 2015 03:38 PM (This post was last modified: Aug 26, 2016 06:54 AM by JaNuS18.)
Hi folks,

Here is my challenge #9 of 10 for M"SQLi circle members (open to others too). 🎉

~ Tasks ~
- display top 5 tables with their records count
- use colors

~ Site ~
aHR0cHM6Ly93d3cubGluZGFrYW1taW5zLmNvbS9jaGVja291dC5waHA/Y2F0aWQ9MTEmY2hlY2tjaG9vc2VyPWNoZWNrb3V0JnNpZD1hZmJlNjk3Y2M2ZjBmNjRiMDEzMzEzYTY1NzIzMjE5Mw==
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img15.hostingpics.net/pics/92202691c5.jpg[/img]

~ Rules ~
- union select
- don't use limit, lpad, rpad (new rule)
- your injection should work without knowing anything about tables/records on that site

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- Kashmiri_Wolf (by old rules)
- Kashmiri Hunter (by old rules)
- Inject0r Killer

Try also my other challenges for advanced injectors:
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
Janus - SQLi challenges for advanced injectors
syrian thunder
syrian thunder Offline
[closed@HF:]
Posts:
187
Threads:
30
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 24, 2015 06:16 PM
seems kind of hard ..tired trying today .. will continue tomorrow
Kashmiri_Wolf
Kashmiri_Wolf Away
[n00b@HF:]
*
Registered
Posts:
81
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 29, 2016 06:51 PM
http://prntscr.com/ba0o4n

Thanks 🤝
Kashmiri Hunter
Kashmiri Hunter Offline
[user@HF:]
*
Registered
Posts:
378
Threads:
37
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
May 29, 2016 07:23 PM
(May 29, 2016 06:51 PM)Kashmiri_Wolf Wrote:  http://prntscr.com/ba0o4n

Thanks 🤝

Soon I will be Solver 🤗
Kashmiri_Wolf
Kashmiri_Wolf Away
[n00b@HF:]
*
Registered
Posts:
81
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 30, 2016 08:43 AM
(May 29, 2016 07:23 PM)Kashmiri Hunter Wrote:  Soon I will be Solver 🤗

I Know U Are Leet 🎉
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 30, 2016 10:49 AM (This post was last modified: May 30, 2016 10:51 AM by JaNuS18.)
(May 29, 2016 07:23 PM)Kashmiri Hunter Wrote:  Soon I will be Solver 🤗

(May 30, 2016 08:43 AM)Kashmiri_Wolf Wrote:  I Know U Are Leet 🎉

Both added to solvers. 👍

P.S.
New rule added...
Janus - SQLi challenges for advanced injectors
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 9, 2016 04:56 AM
prntscr.com/c3hong

Can't Pm You Now Will Pm You Soon 🤝
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Aug 9, 2016 08:29 AM
(Aug 9, 2016 04:56 AM)Inject0r Killer Wrote:  prntscr.com/c3hong

Can't Pm You Now Will Pm You Soon 🤝

You are using functions which are breaking rule #3

Please modify your syntax. 👍
Janus - SQLi challenges for advanced injectors
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 9, 2016 08:30 AM
(Aug 9, 2016 08:29 AM)JaNuS18 Wrote:  You are using functions which are breaking rule #3

Please modify your syntax. 👍

Ok Sir I Will Try 🤝
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 11, 2016 04:41 AM (This post was last modified: Aug 11, 2016 04:41 AM by Inject0r Killer.)
Check Pm ... Query Sent !! 🤝
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Aug 11, 2016 05:36 AM
(Aug 11, 2016 04:41 AM)Inject0r Killer Wrote:  Check Pm ... Query Sent !! 🤝

You are still violating rule #3.

Good luck 👍
Janus - SQLi challenges for advanced injectors
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER
by Berry WhiteApr 24, 2020 11:08 AM 4 508 Apr 24, 2020 11:08 AM
Last Post: ApertureSecurity