SQLi challenge

[ajkaro]

Here is another SQLi challenge to sharpen your skills

Target:

hXXp://redc.lums.edu.pk/enrollment.php?section_id=10&pcid=53

Task:

• display version with your name
  
• display name of primary database
  
• display tables from primary database
  

Proof:

Rules:

• use union select based SQLi
  
• post picture as your proof
  
• send me your command to PM
  
• colors in SQLi output are not required
  

Edit: In May 2013, when I opened that challenge, there was an interesting WAF (no more present)

Solvers:

- Bitmap

- danyweb09

- Renegade

Edited September 1, 2013 by ajkaro

[BitMap]

This was a bit weird, but i liked it. Very nice.

[dancezar]

BIG LIKE Thanks ajkaro for the challenge

[Renegade]

[dext]