Skip to content

Commit

Permalink
README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
aykutcanustun authored Jun 20, 2020
1 parent 71f53eb commit 03654b2
Showing 1 changed file with 6 additions and 10 deletions.
16 changes: 6 additions & 10 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,15 +12,11 @@ To retrieve values inside column: <br/>
## How To Set Varibles:
To use the script, you have to set varibles according to your request's header, data and response etc. <br/>
I marked these lines with comments in main.py! <br/>

Make changes at these lines:
![replacements](https://github.com/aykutcanustun/SQLiteBLINDInjection/blob/master/replacements.png)

Replace "username" string with your request's data as below:
![request](https://github.com/aykutcanustun/SQLiteBLINDInjection/blob/master/request.png)

You have to try this query manually for see what is the reply: <br/>
Make changes at these lines: <br/>
![replacements](https://github.com/aykutcanustun/SQLiteBLINDInjection/blob/master/replacements.png) <br/>
Replace "username" string with your request's data as below: <br/>
![request](https://github.com/aykutcanustun/SQLiteBLINDInjection/blob/master/request.png) <br/>
You have to make this request manually to see what is the response: <br/>
' or UNICODE(SUBSTR((SELECT name FROM sqlite_master WHERE type='table'),1,1)) < 128 -- <br/>
Replace "Data Sent!" string according to your manual request's reply:

And replace "Data Sent!" string according to your manual request's reply: <br/>
![response](https://github.com/aykutcanustun/SQLiteBLINDInjection/blob/master/response.png)

0 comments on commit 03654b2

Please sign in to comment.