Active Members dancezar Posted August 3, 2013 Active Members Report Share Posted August 3, 2013 (edited) Target:Cepco ManagementDificulty:MediuProof:View image: prooffCerinte:-Scoateti versiunea si numele bazei de date impreuna cu nick-ul vostru pe o singura coloana-Faceti o poza cenzurata si o postati aici-Trimiteti sintaxa prin PM-Nu dati hinturiSolvers:-Hannibal-electrotech93-Renegade-qwerty12 (muie ba)//Challenge ClosedRezolvarea este in felul urmator:-Pentru a numara coloanele folosim') order by 1+--+Din cate imi amintesc erau 35 de coloaneApoi daca incercam sa facem union:') union select 1,2,3,4,5,6,7......35+--+Primeam 403 Forbiten Union este filtrat astfel vom aplica metoda cu comentarii pentru a trece de WAF /*!50000UnIoN*/') /*!50000UnIoN*/ Select 1,2,3,4,5,6,7,....35+--+Mai ramanea sa faceti concat sa scoateti versiune db si nick.Daca incercam sa facem concat() vom primi 403 puteti folosi acelasi metoda ca mai sus cu comentarii sau mai simplu si elegant cu concat_ws(0x3a,version(),database())Felicitari tuturor!! Va astept si la urmatorul challenge Edited August 8, 2013 by danyweb09 Quote Link to comment Share on other sites More sharing options...
Hannibal. Posted August 3, 2013 Report Share Posted August 3, 2013 Trebuie rezolvata prin union based..sau?Nu de alta dar nu ai specificat. Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted August 3, 2013 Author Active Members Report Share Posted August 3, 2013 Normal ca union , nu am specificat pentru se intelege de la sine,mai merge si blind sau timebased ceea ce se face cu un tool iar rezultatul nu ar fi ca in poza mea.Daca te referi la error based nu merge pt ca erroarea iti spune ca mysql_fetch_array nu a returnat rezultate dar nu iti arata eroarea aia You have a sintax error balaalabalba,ar fi fost prea simplu.Mai incerca;) Quote Link to comment Share on other sites More sharing options...
Hannibal. Posted August 3, 2013 Report Share Posted August 3, 2013 (edited) Nu am incercat inca challenge-ul, te-am intrebat pentru ca nu ai specificat, ma gandeam ca ai alte cerinte. Oricum, m-am lamurit, UNION BASED.//LE: Destul de usor, multumesc pentru challenge. Edited August 3, 2013 by Hannibal. Quote Link to comment Share on other sites More sharing options...
electrotech93 Posted August 3, 2013 Report Share Posted August 3, 2013 http://5.154.4.120/ScreenHunter_380.jpg Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted August 3, 2013 Author Active Members Report Share Posted August 3, 2013 Astept sintaxa CORECTA pe pm Quote Link to comment Share on other sites More sharing options...
BitMap Posted August 4, 2013 Report Share Posted August 4, 2013 (edited) Salut, bine v-am regasit. Dupa o perioada de inactivitate, am zis ca ar fi cazul sa mai revin si eu, si pentru inceput cel mai bine cred ca ar fi cu un challenge, poate un tutorial, ceva mai marunt.ON topic:Nu cred ca este exact la ce te asteptai, dar mersi pentru challenge. Edited August 4, 2013 by BitMap Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted August 4, 2013 Author Active Members Report Share Posted August 4, 2013 Foarte frumos dar nu este locul unde am indicat,credema este mult mai greu unde am indicat eu;) Quote Link to comment Share on other sites More sharing options...
Hannibal. Posted August 4, 2013 Report Share Posted August 4, 2013 Normal ca union.@BitMap: Macar daca te-ai fi obosit sa citesti tot topicul ti-ai fi dat si singur seama, sunteti penibili, sincer. Quote Link to comment Share on other sites More sharing options...
Renegade Posted August 4, 2013 Report Share Posted August 4, 2013 Quote Link to comment Share on other sites More sharing options...
2time Posted August 4, 2013 Report Share Posted August 4, 2013 la sfarsit puteti posta rezolvarea :"> Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted August 4, 2013 Author Active Members Report Share Posted August 4, 2013 Am sa postez:) Quote Link to comment Share on other sites More sharing options...
2time Posted August 4, 2013 Report Share Posted August 4, 2013 ms mult Quote Link to comment Share on other sites More sharing options...
qwerty12 Posted August 5, 2013 Report Share Posted August 5, 2013 (edited) http://postimg.org/image/andsw90dn/Pasarica ,give me a hall of fame! Edited August 5, 2013 by qwerty12 Quote Link to comment Share on other sites More sharing options...
2time Posted August 8, 2013 Report Share Posted August 8, 2013 puteti pune rezolvarea acuma Quote Link to comment Share on other sites More sharing options...
qwerty12 Posted August 8, 2013 Report Share Posted August 8, 2013 Cepco Management Quote Link to comment Share on other sites More sharing options...
2time Posted August 8, 2013 Report Share Posted August 8, 2013 ms mult incerc si eu sa invat Quote Link to comment Share on other sites More sharing options...
Renegade Posted August 8, 2013 Report Share Posted August 8, 2013 @qwerty12 - trebuia sa il lasi pe danyweb09 sa puna rezolvarea (puteai trimite rezolvarea lui 2time prin PM pana la inchiderea challenge-ului) Quote Link to comment Share on other sites More sharing options...
qwerty12 Posted August 8, 2013 Report Share Posted August 8, 2013 Renegade sunt sigur ca Pasarica nu se supara ca am facut asta..oricum nu mai posta nimeni nimic.. Quote Link to comment Share on other sites More sharing options...
Active Members dancezar Posted August 8, 2013 Author Active Members Report Share Posted August 8, 2013 Renegade sunt sigur ca Pasarica nu se supara ca am facut asta..oricum nu mai posta nimeni nimic..off: Ba se supara:| Si daca imi trimite acuma unu PM si imi zice ca a vrut sa faca challengeul da n-a avut loc de tine:)).Oricum am postat si un "tutorial" cum am rezolvat eu.Alta data intreaba inainte sa postezi:).ON : Felicitari tuturor va astept la urmatorul challenge. Quote Link to comment Share on other sites More sharing options...
qwerty12 Posted August 8, 2013 Report Share Posted August 8, 2013 Da Pasarica lasa ca iti trece supararea ))))) Bafta! Quote Link to comment Share on other sites More sharing options...