What makes a SQL Injection counted as blind injection?
Firstly, from what I have read so far, boolean based blind sql injection is you can't see any error messages and rely on true or false query to milk the database.
eg. Craft a query that will ask the database is the the first character of the table schema name is an "E" or whatever? And you will keep asking until you got the database name, table name and column names to dump the information you wanted..
I understand that there is also time based blind sql injection but I'm not concern about that.
Secondly, I have seen many youtube videos/articles saying what they have shown is a blind sql injection(because no error messages shown). However, they still are able to use UNION SELECT query to pull information out from the database.
eg. id=1' UNION SELECT 1,2,3,table_name from information_schema.tables
Isn't this counted as UNION based sql injection? If not, what is this called?
Is there anything wrong with my understanding? By right a pure blind sql injection doesn't allow you to use UNION statements am I right?
Firstly, from what I have read so far, boolean based blind sql injection is you can't see any error messages and rely on true or false query to milk the database.
eg. Craft a query that will ask the database is the the first character of the table schema name is an "E" or whatever? And you will keep asking until you got the database name, table name and column names to dump the information you wanted..
I understand that there is also time based blind sql injection but I'm not concern about that.
Secondly, I have seen many youtube videos/articles saying what they have shown is a blind sql injection(because no error messages shown). However, they still are able to use UNION SELECT query to pull information out from the database.
eg. id=1' UNION SELECT 1,2,3,table_name from information_schema.tables
Isn't this counted as UNION based sql injection? If not, what is this called?
Is there anything wrong with my understanding? By right a pure blind sql injection doesn't allow you to use UNION statements am I right?
No comments:
Post a Comment