Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › [Janus] SQLi challenge #13

Thread Closed 

[Janus] SQLi challenge #13
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Apr 22, 2015 02:27 PM (This post was last modified: Apr 23, 2015 04:29 AM by JaNuS18.)
Here is my (lucky number) challenge #13 🎉

~ Tasks ~
- display text (label) VERSION, database version and your nick name (see proof picture)

~ Target ~
aHR0cDovL3d3dy5jb25kb3JlbnRhbC5jb20ucGgvYWQtZGV0YWlscy5waHA/aWQ9MTM0
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img15.hostingpics.net/pics/74845952c1.jpg[/img]

~ Rules ~
- use union select
- get only
- don't ask for hints or solution

To make challenge more interesting we will add some additional rules:
- word VERSION may not be anywhere in your syntax in any format (ascii, hex, binary, unicode, URL encoded, base64....)
- you may not use any string function

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- benzi

Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
Janus - SQLi challenges for advanced injectors
benzi
benzi Offline
pac
***
HF Ub3r
Posts:
3,330
Threads:
30
Credibility:
000
Popularity:
13
βytes:
β 0
Game XP:
0
Apr 23, 2015 03:16 AM (This post was last modified: Apr 23, 2015 03:16 AM by benzi.)
thanks for nice one, done.
'VERSION : 5.5.40-36.1 : hf benzi'
pmed you my query.
if you cant find somethin to live for, you best find somethin to die for.
abhilyall
abhilyall Offline
[user@HF:]
**
HF l33t
Posts:
268
Threads:
39
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 23, 2015 07:55 AM
XPATH syntax error: ':VERSION:5.5.40-36.1:abhilyall'

Sent you my query. Thanks for challenge.
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Apr 23, 2015 10:07 AM (This post was last modified: Apr 23, 2015 10:33 AM by JaNuS18.)
(Apr 23, 2015 07:55 AM)abhilyall Wrote:  XPATH syntax error: ':VERSION:5.5.40-36.1:abhilyall'

Sent you my query. Thanks for challenge.

Please read rules:
- use union select
- you may not use string function(s) (concat in your case)

Thanks for your participation 🤝
Janus - SQLi challenges for advanced injectors
Kashmiri Hunter
Kashmiri Hunter Offline
[user@HF:]
*
Registered
Posts:
378
Threads:
37
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
May 4, 2016 06:49 AM
Master Janus Any Hint Please?
54j1b
54j1b Offline
[n00b@HF:]
*
Registered
Posts:
32
Threads:
1
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 4, 2016 08:09 AM
Thanks Master

' :::::::: VERSION :: 5.5.42-37.1 :: 54j1b :::::::: '

I am New Member in HF . SO I can't Pmed Query .
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 4, 2016 11:50 AM (This post was last modified: May 4, 2016 11:53 AM by JaNuS18.)
(May 4, 2016 06:49 AM)Kashmiri Hunter Wrote:  Master Janus Any Hint Please?

See rules 😅



(May 4, 2016 08:09 AM)54j1b Wrote:  Thanks Master

' :::::::: VERSION :: 5.5.42-37.1 :: 54j1b :::::::: '

I am New Member in HF . SO I can't Pmed Query .

Waiting for your PM (when you will be allowed to send it...). Until then I can't evaluate your syntax (and put you on solvers list if you followed all rules...).
Janus - SQLi challenges for advanced injectors
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 9, 2017 08:48 PM
Pm sent ... ! THanks 🤝
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Sep 10, 2017 04:39 AM
(Sep 9, 2017 08:48 PM)Inject0r Killer Wrote:  Pm sent ... ! THanks 🤝

Re-send. Blocking removed...
Janus - SQLi challenges for advanced injectors
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 10, 2017 05:32 AM
(Sep 10, 2017 04:39 AM)JaNuS18 Wrote:  Re-send. Blocking removed...

PM already sent on fb 👍
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Sep 10, 2017 06:05 AM
(Sep 10, 2017 05:32 AM)Inject0r Killer Wrote:  PM already sent on fb 👍

OK.

I visit FB just here and there, to answer PMs.
Janus - SQLi challenges for advanced injectors
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 10, 2017 08:39 AM
(Sep 10, 2017 06:05 AM)JaNuS18 Wrote:  OK.

I visit FB just here and there, to answer PMs.

😁 Btw sent you here too 😝
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER
by Berry WhiteApr 24, 2020 11:08 AM 4 508 Apr 24, 2020 11:08 AM
Last Post: ApertureSecurity