
User Seeks Clarification on Blind SQL Injection Technique
SQLInjectionBlindSQLITimeBasedDatabaseSecurityCybersecurity
The post describes a user testing time-based blind SQL injection by observing delays in responses. They initially confirmed a 5-second delay with a value of "2" in the URL, suggesting two columns. However, changing the value to "11" and later "100" also produced the same delay, leading them to question whether the database truly has that many columns. The user successfully enumerated a database name using these higher values but remains unsure how to accurately determine the correct number of columns.