[SQLi] challenge

[ajkaro]

Target:

aHR0cDovL3d3dy5uZXd0ZWNoLmNvbS5way9wcm9kdWN0LnBocD9wX2lkPTIxMw==

Base64 decode it

Tasks:

• display version with your name
  
• display what users with ID 100, 113, 116, 122, 126 has bought from computer store (display ID and name of each user, name of bought product, quantity and its price)
  

Proof:

Rules:

• use union select based SQLi
  
• post picture as proof and send me your syntax to PM
  
• don't share any part of the challenge until challenge is open
  
• don't ask for hints until challenge is open
  

Solvers:

-

Edited November 1, 2013 by ajkaro

[dancezar]

I don't know more, i just try ... fuck concat

Ai citit macar din intamplare ce scrie la Tasks?unde vezi tu ca scrie sa extragi tabelele?

Ajkaro where is your PM button?how i can send you the syntax?

[dancezar]

Scuze de off-topic : Bai inteleg ca nu stii engleza dar... am spus ca nu stiu mai mult, nu le am cu concat-u .

Asa ca am afisat doar table-urile .

off:Am sa il rog pe ajkaro sa faca un challenge si la task sa treaca "Faceti ce stiti",cand am sa dau de el

//Nu le ai cu concatu?