[PDF] Blind Sql Injection with Regular Expressions Attack

[M2G]

Index

Why blind sql injection?
How blind sql injection can be used?
Testing vulnerability (MySQL - MSSQL):
Time attack (MySQL)
Time attack (MSSQL)
Regexp attack's methodology
Finding table name with Regexp attack (MySQL)
Finding table name with Regexp attack (MSSQL)
Exporting a value with Regexp attack (MySQL)
Exporting a value with Regexp attack (MSSQL)
Time considerations
Bypassing filters
Real life example
Conclusions

http://www.ihteam.net/papers/blind-sqli-regexp-attack.pdf

You can download an example of PHP code from

http://www.ihteam.net/papers/regexp_bsqli.php.tar.gz