webPromedium

Совсем слепая инъекция (Completely Blind Injection)

bug-makers

Task: Node.js API injects user input into SQL WHERE clause, but returns identical response for both success and error — no boolean oracle. Solution: time-based blind SQLi using SQLite IIF() with recursive CTE as delay mechanism, binary search extraction.

$ ls tags/ techniques/
sqlitesqlinodejsexpressblind_sqlitime_basedrecursive_cteiif
binary_search_extractiontime_based_blind_sqlirecursive_cte_delaysqlite_iif_conditionalsqlite_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups