Blind SQL Injection is used when a web application is vulnerable to SQL injection but the results of the injection are not visible to the attacker. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become time-intensive because a new statement must be crafted for each bit recovered.
This video shows a demo of how to conduct a Blind SQL Injection attack. Thanks go out to Saaybr (nwevqx [] csipvn.com) for uploading this video on SecurityTube.
No comments:
Post a Comment