SQLi challenge

[ajkaro]

Target:

hXXp://wXw.ece.com.tw/p-detail.php?id=12&cID=2&uID=1

Task:

• display number of all databases
  
• show all databases one after another and within each database show number of tables and list of all tables in that database
  
• all tables within each database should be numbered (ascending or descending is your choice)
  
• mark all table(s) in each database where column like "pass" is present with *** pass ***
  

Proof:

Rules:

• you can use only one command to get result (see proof picture)
  
• all database (and table) names should be retrieved by your SQLi. You can't use any of them hard coded in your command (not even information_schema using like table_schema!=information_schema)
  
• use union select based SQLi
  
• post your picture as proof
  
• send me your command to PM (obligatory)
  
• colors are not required
  
• font change for better output is not required
  
• lines for better output are not required
  

Solvers:

- Bitmap

- danyweb09

Edited September 3, 2013 by ajkaro

[BitMap]

Piece of cake

A very very challenging challenge, only thanks to ajkaro.

// sorry for the long post

Edited September 4, 2013 by BitMap

[dancezar]

This is a real challenge very nice:)