Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › [Janus] SQLi challenge #16

Thread Closed 

[Janus] SQLi challenge #16
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Jun 15, 2015 08:31 AM (This post was last modified: May 19, 2016 02:54 PM by JaNuS18.)
~ Tasks ~
- display version with your nick name, database and user
- display list of databases with maximum and minimum records found among all tables within each database

~ Target ~
aHR0cDovL3d3dy5jbmN0LnRn
(Base64 decode it using online decoder like https://www.base64decode.org/)

~ Proof ~
[img]http://img11.hostingpics.net/pics/71301166c1.jpg[/img]

~ Rules ~
- use union select (GET)
- you can have max 2 SELECT statements in your complete syntax (plus additional one used in starting UNION SELECT)
- you may not use any local variable or command LIMIT or SUBSTRING_INDEX
- your injection should work without knowing anything about databases/tables on that site
- don't ask for hints or solution

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let's SQL knowledge be with you 👍

~ Solvers ~
- iHacker-n00b
- shafoon

Edit:
URL is not SQLi vulnerable any more...

Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
Janus - SQLi challenges for advanced injectors
SiStemiC
SiStemiC Offline
[bin@HF:]
***
HF l33t
Posts:
1,031
Threads:
38
Credibility:
000
Popularity:
35
βytes:
β 0
Game XP:
0
Jun 16, 2015 02:25 PM
Dude that's way too hard! I sweat just by looking at the rules...
Any help appreciated BTC ~
1JiBi7CjHuFqcJXyceXWKPBBQHjGn2JMKu
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Jun 22, 2015 01:50 AM
(Jun 16, 2015 02:25 PM)SiStemiC Wrote:  Dude that's way too hard! I sweat just by looking at the rules...

Well it require some thinking 😉

Hard will be my next challenge #17 with same task but with only one SELECT allowed (that one in combination with UNION) 🎉
Janus - SQLi challenges for advanced injectors
m4rk0n
m4rk0n Offline
[user@HF:]
*
Registered
Posts:
346
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 16, 2015 09:36 AM (This post was last modified: Jul 16, 2015 09:39 AM by m4rk0n.)
[Image: Clipboard02017cc.jpg]
Just the injection part.
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Jul 16, 2015 01:44 PM
(Jul 16, 2015 09:36 AM)m4rk0n Wrote:  [Image: Clipboard02017cc.jpg]
Just the injection part.

I don't see any picture and you didn't send any syntax, so I can't evaluate...
Janus - SQLi challenges for advanced injectors
m4rk0n
m4rk0n Offline
[user@HF:]
*
Registered
Posts:
346
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 16, 2015 02:32 PM
(Jul 16, 2015 01:44 PM)JaNuS18 Wrote:  I don't see any picture and you didn't send any syntax, so I can't evaluate...
No problem. No need to evaluate. Just doin' it for fun. And I see the pic btw.
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Jul 16, 2015 03:25 PM
(Jul 16, 2015 02:32 PM)m4rk0n Wrote:  No problem. No need to evaluate. Just doin' it for fun. And I see the pic btw.

OK

P.S.
That is how I see your picture
[img]http://img15.hostingpics.net/pics/23493238c2.jpg[/img]
Janus - SQLi challenges for advanced injectors
m4rk0n
m4rk0n Offline
[user@HF:]
*
Registered
Posts:
346
Threads:
7
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 16, 2015 03:34 PM
(Jul 16, 2015 03:25 PM)JaNuS18 Wrote:  OK

P.S.
That is how I see your picture
[img]http://img15.hostingpics.net/pics/23493238c2.jpg[/img]

Strange. this is the link:
https://www.anony.ws/i/2015/07/16/Clipboard02017cc.jpg
Inject0r Killer
Inject0r Killer Offline
[user@HF:]
*
Registered
Posts:
223
Threads:
17
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Aug 13, 2016 09:27 PM
Site Patched I Guess .... Update The Target Master 🤝
JaNuS18
JaNuS18 Offline
[bin@HF:]
***
HF Ub3r
Posts:
1,294
Threads:
50
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Aug 13, 2016 11:02 PM (This post was last modified: Aug 13, 2016 11:07 PM by JaNuS18.)
(Aug 13, 2016 09:27 PM)Inject0r Killer Wrote:  Site Patched I Guess .... Update The Target Master 🤝

I already made a notice about that (05-20-2016).
See Edit section in opening post. 🤝

Challenge closed.
Janus - SQLi challenges for advanced injectors
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by GOD_SLAYERDec 24, 2022 12:16 PM 9 604 Dec 24, 2022 12:16 PM
Last Post: Skorp
by GOD_SLAYERAug 19, 2022 07:11 PM 0 166 Aug 19, 2022 07:11 PM
Last Post: GOD_SLAYER
by Berry WhiteApr 24, 2020 11:08 AM 4 508 Apr 24, 2020 11:08 AM
Last Post: ApertureSecurity