Blind SQL Injection

Difficulty: Advanced

Question

What is Blind SQL injection?

Answer

An attack where the server doesn't return data in the response, but the attacker can infer information by observing differences in server behavior (e.g., response time or page status).

Concepts covered

SQLi, Exfiltration