[SQLi] challenge

[ajkaro]

Target:

h~~p://w~w.solu[RST]cionese[RST]xpertise.com/ver_noticia.php?not=5

replace all ~ and remove all [RST]

Tasks:

• display version with your name
  
• display all tables in primary database
  
• after each table name display numbered list of columns names for that table (start numbering with 1 for each new table name)
  

Proof:

Rules:

• use union select based SQLi
  
• post picture as proof
  
• send me your command to PM
  
• your command should work without knowing anything about database on that site (no previous SQLi injection for checking tables and/or columns names are allowed/needed)
  
• don't share any part of the challenge until challenge is open
  

Solvers:

- danyweb09

- Renegade

Edited August 28, 2013 by ajkaro

[dancezar]

http://s13.postimg.org/lk21eqhty/sqli_ajkaro3.jpg

Very very nice challenge thanks:D

[Renegade]