[SQLi] challenge

[ajkaro]

Here is challenge (exercise) for basic data manipulation

Target:

h~~p://w~w.te[RST]s-u[RST]a.com/catalog.php?cat_id=5&brend=3

replace all ~ and remove all [RST]

Tasks:

• display version with your name
  
• display all tables from primary database where more than 10 records exists
  
• column with table names (in output) should be left aligned (see proof picture)
  
• column with records number for each table (in output) should be right aligned (see proof picture)
  

Proof:

Rules:

• use union select based SQLi
  
• using HTML code for column alignment IS NOT allowed
  
• post picture as proof
  
• send me your command to PM
  
• don't share any part of the challenge until challenge is open
  

Solvers:

-

Challenge closed.

Edited October 3, 2013 by ajkaro

[dancezar]

I successfully done the injection but I could not do the left aligment.

[ajkaro]

Please:

- use font courier (or any other monospaced font) for easier reading of your output

- replace all _ with white spaces

[Renegade]

same as danyweb09. after the challenge is closed, please post the solution

[dancezar]

much beter:))

[ajkaro]

I am writing tutorial about manipulation of SQLi output data. It will be published on HF (soon). There will be complete explanation for this (and my other similar) challenge(s)

[ajkaro]

I promised tutorial. Here it is http://www.hackforums.net/showthread.php?tid=3785325

Challenge closed.