6 docs tagged with "sqli"

In this section, we'll describe what blind SQL injection is, explain various techniques for finding and exploiting blind SQL injection vulnerabilities.

Blind sqli with out-of-band interaction (OAST)

Condition based Sql injection

==> Most database types (with the notable exception of Oracle) have a set of views called the information schema which provide information about the database.

description

In the preceding example, suppose that the application now catches database errors and handles them gracefully. Triggering a database error when the injected SQL query is executed no longer causes any difference in the application's response, so the preceding technique of inducing conditional errors will not work.