beefproject/beef — Issue #602: Enhance XssRays with time-based blind SQLi detection
Author: antisnatchor
Created: 2012-01-17 09:55:30+00:00
State: open
Labels: Cross-domain SQLi

Create a cross-domain SQLi scanner.
The process will search for a time-based blind SQL injection detection.

As we can monitor response timing in cross-domain requests, we can determine if adding a delay to the query (SLEEP, BENCHMARK, etc...) will increase accordingly the response time.

In this way we can check, cross-domain, if a resource is vulnerable to time-based blind SQLi through Javascript.