ajkaro Posted February 2, 2013 Report Share Posted February 2, 2013 (edited) Target:_ttps://www.cbmin.org/cbm/directory?category=131Task:display version with your name display all table names with first letter c or d bellow the list put the count of such tables Proof:Rules:use union select based SQLi post picture as proof send me your command to PM Solvers:- Gecko- EterNo- RenegadeCHALLENGE CLOSED. Edited September 25, 2013 by ajkaro Quote Link to comment Share on other sites More sharing options...
EterNo Posted March 17, 2013 Report Share Posted March 17, 2013 Thanks, good challenge. Quote Link to comment Share on other sites More sharing options...
ajkaro Posted May 10, 2013 Author Report Share Posted May 10, 2013 Challenge is re-open.Site owner patched SQLi vulnerability, so old command for challenge doesn't work any more. But there are other ways ...If anybody wants to try same challenge again: this time please give me version with your name. Use union select based SQLi. Send your command to PM.Proof: Quote Link to comment Share on other sites More sharing options...
Renegade Posted September 25, 2013 Report Share Posted September 25, 2013 Quote Link to comment Share on other sites More sharing options...
.darky Posted September 29, 2013 Report Share Posted September 29, 2013 Quote Link to comment Share on other sites More sharing options...
ajkaro Posted September 29, 2013 Author Report Share Posted September 29, 2013 (edited) That challenge is closed. Didn't you see remark about that?They removed WAF so now it isn't challenging any more... Plain basic injection... Edited September 29, 2013 by ajkaro Quote Link to comment Share on other sites More sharing options...
