Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
SQLbit - Just Another Script For Automatize Boolean-Based Blind SQL Injections
http://www.kitploit.com/2021/12/sqlbit-just-another-script-for.html
A script for automatize boolean-based blind SQL injections.
Works with SQLite (https://www.kitploit.com/search/label/SQLite) at least, supports using cookies.
It uses bitwise comparisons with multithreading (https://www.kitploit.com/search/label/Multithreading) to find cell values instead of binary (https://www.kitploit.com/search/label/Binary) search, which is more efficient.It's able to:Search cell values by columns in a tableSearch characters count in a cells by columns in a tableSearch rows count in a tableThe search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values ​​of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).