Portswigger Lab(SQLi)

 

There are different types of SQL Injection attacks such as Error based, Time based and Boolean based. Each of the types of SQLi has the potential to cause a complete data breach in an organization. In this article, we are going to explore the Time Based SQL Injection attack. This type of SQL Injection utilizes the database time delays function to extract or dump the database. Let’s explore this in detail.

Step 1 : 

            Intercept the request of targeted site  on burpsuite.

Step 2:

            Sent request to intruder .

Step 3: 

           Add target point .

Step 4: 

           Load payload 

Step 5:

            Create  new resource pool

Step 6:

           Do attack 

 

Finally you got the worked paylaod

Press start 

Most time taken response payload is worked payload