» Methods of Quick Exploitation of Blind SQL Injection

[sniip3r]

SQL Injection vulnerabilities are often detected by analyzing error messages received from the database, but sometimes we cannot exploit the discovered vulnerability using classic methods (e.g., union). Until recently, we had to use boring slow techniques of symbol exhaustion in such cases. But is there any need to apply an ineffective approach, while we have the DBMS error message?! It can be adapted for line-by-line reading of data from a database or a file system, and this technique will be as easy as the classic SQL Injection exploitation. It is foolish not to take advantage of such opportunity! In this paper, we will consider the methods that allow one to use the database error messages as containers for useful data

Download PDF:

http://www.ptsecurity.com/download/PT-devteev-FAST-blind-SQL-Injection.pdf

[Tsukasa]

If you load up fast-track/msf you will find that it has error based / blind injection modules.