Hi Jerome.
Could you explain how "regexp attacks" are different than blind-based
inference (in terms of "faster")?
Could you explain how "regexp attacks" could be used in time-based attacks
(in terms of "faster") in real life situations where network lags are
non-deterministic?
My 2-cents. That
Hi,
I am currently trying to add the support of the regexp technique (
http://www.ihteam.net/papers/blind-sqli-regexp-attack.pdf ) for blind sqli.
It is faster than Time-based blind SQL injection.
I have some problems to define the correct queries and payloads in the
xml files.
Did someone alrea