Elliot is exploiting a web application vulnerable to SQL injection. He has introduced conditional timing delays to determine whether the injection is successful.
What type of SQL injection is Elliot most likely performing?
Blind SQL injection is used when the application does not return errors or display query results. In such cases, attackers use inference methods such as:
Boolean-based queries
Time-based queries (e.g., using SLEEP or WAITFOR DELAY)
Elliot’s use of timing delays indicates a time-based blind SQL injection.
From CEH v13 Courseware:
Module 10: Web Application Hacking → SQL Injection Types
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit