Web Security Academy | SQLi | 11 - Conditional Responses
In this video we solve Portswigger's Web Security Academy SQL injection lab named Conditional Responses using a Python script. This is a blind boolean-based SQL injection exploit.
This video is a long one! It took a bit to find the right input to reliably trigger the True/False we were looking for and then to determine the type of database in use. Once we figured all the parts out it was just a matter of putting it together.
We spent a bit of extra time to use threading so that the responses come back a bit quicker.
Hope you learn something, please don't hesitate to hit me up with any questions you may have.