beefproject/beef — Issue #603: Enhance XssRays with time-based blind SQLi exploitation
Author: antisnatchor
Created: 2012-01-17 09:57:45+00:00
State: open

After the detection of a time-based blind SQLi is confirmed, we want to actually grab data.
Something like the bisection algorithm of SQLmap can be analyzed, adapted and extended to accomplish this goal.

In this way we will be able to retrieve actual data from the DB of the vulnerable application.