Archive of Blind SQL Injection
-
Time-Based Blind SQL Injection using Heavy Query
Posted in Blind SQL InjectionUsing heavy queries instead of time delays. For different reasons, it might happen that it is impossible to use time delay functions or procedures in order to achieve a classic time delay injection. In these situations, the best option is to...
Continue reading this entry → -
Estimating MySQL Table Size using SQL Injection
Posted in Blind SQL InjectionInjecting short time delays in WHERE clause. In some cases, the attacker might want to have a rough idea about the number of records in a table. This is not a crucial piece of information, however it could be helpful to know how much time will be...
Continue reading this entry → -
Time-Based Blind SQL Injection Attacks
Posted in Blind SQL InjectionPerform tests by injecting time delays. Time-based techniques are often used to achieve tests when there is no other way to retrieve information from the database server. This kind of attack injects a SQL segment which contains specific DBMS function or heavy query that generates a...
Continue reading this entry →
