Time-Based Blind SQL Injection!

👩‍🎓👨‍🎓 Learn about SQL Injection vulnerabilities. In this video, we are going to have a look at how to retrieve data from a PostgreSQL database by monitoring DB sleeps using the pg_sleep() function.

Overview:
00:00 Intro
00:13 Lab overview
00:53 Using Stacked Queries
02:29 Query for Administrator Username
03:10 Find out Length of Administrator's Password
04:32 Retrieve Administrator's Password
09:56 Conclusion

---

[GilchristAime]

How did you determine that this application is using postgresql?

[joker-pjcm]

I am a beginner learning SQLMAP, I often find databases that have time-based blind type parameters, how do I solve this problem, please help

[stepanparant]

Thank you !
Why does the SQLi need to be encoded here ? In every other challenge involving this trackingID cookie, it did not need to be encoded

[jaimeloera]

Great content and easy to follow, well done!

[linus-hung]

Thanks for sharing! Would like to ask about what is the use of %3B in the beginning of the test.

[ZarkaKhan-vvko]

Great video! But I have a small doubt .... I have injected : 0'XOR(if(now()=sysdate(), sleep(30), 0))XOR'Z& and in the Response it took me around 60.833 milliseconds so I am confused here why is it taking such a long time to respond what exactly does this mean.... Plz help

[djkuco]

I see this lab has the vulnerability in the tracking id cookie. What are some common input methods for this type of vulnerability? search input, category filters, ....or is it only in cookies/tracking id's?

[Zigzog]

THANK YOU! I had been looking all over trying to understand WHY %3B was needed, it was driving me crazy. Appreciate you breaking it down how you did.

[costycrypto]

Thank you so much for you great efforts

I wan to ask you about a hard situation i got on many website vulned to SQLI
SQLMAP success to make the Payloads but can't receive and enumerate the Database because the WAF (Akamei)
i have try to use --tamper= all the scripts without any success to receive the database name any solution how to bypass WAF in SQL Injection with SQLMAP?

[turin]

Excellent video, you mentioned w python script to do this, can someone help me out what that would look like having trouble looping 💔🙈❤️

[alwaysnithin]

Is ' UPDATE ' can be performed in this time based SQL injection

[laventharma]

Nice tutorial. Please mention the software you are using to inject the HTTP header.

[presequel]

this is awesome :) i knew how to do this manual but doing it automatically in burp is fantastic! great video

[sauliko]

How can we defend our website from this injection?

[coders_algoritmers]

false positive or unexploitable injection point detected solutions and why there its come when time based blind vulnerability is available. Please give solutions