Sep 3, 2015 03:47 AM
(This post was last modified: Sep 3, 2015 04:29 AM by JaNuS18.)
Spoiler (Click to View)
~ Tasks ~
- display version with your nick name
- display last 5 tables in each database (like on proof picture)
~ Target ~
aHR0cDovL3d3dy5hbG11bmFmLmNvbS9wcm9kdWN0cy5waHA/Y2F0PTUwMDEmc2lkPTEwMDU=
(Base64 decode it using online decoder like https://www.base64decode.org/)
~ Proof ~
[img]http://img11.hostingpics.net/pics/588576challenge19.jpg[/img]
~ Rules ~
- use regular DIOS (no benchmark allowed)
- don't use SUBSTRING_INDEX for extraction of tables
- you may not control table output with (visible or hidden) tables numbering via local variable
- solution should be pure SQL
- your syntax should work without knowing anything about databases or tables on that site
- don't ask for hints or solution
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let SQL knowledge be with you 👍
~ Solvers ~
-
Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17
janus #18
- display version with your nick name
- display last 5 tables in each database (like on proof picture)
aHR0cDovL3d3dy5hbG11bmFmLmNvbS9wcm9kdWN0cy5waHA/Y2F0PTUwMDEmc2lkPTEwMDU=
(Base64 decode it using online decoder like https://www.base64decode.org/)
[img]http://img11.hostingpics.net/pics/588576challenge19.jpg[/img]
- use regular DIOS (no benchmark allowed)
- don't use SUBSTRING_INDEX for extraction of tables
- you may not control table output with (visible or hidden) tables numbering via local variable
- solution should be pure SQL
- your syntax should work without knowing anything about databases or tables on that site
- don't ask for hints or solution
Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM
Let SQL knowledge be with you 👍
-
Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17
janus #18
Janus - SQLi challenges for advanced injectors



