4 ms·
> it doesn't do any real damage I'm not sure about that. You can perform blind exfiltration of row data by using SLEEP. Handy in situations where you can run a
by regecks 8y ago
> it doesn't do any real damage
I'm not sure about that. You can perform blind exfiltration of row data by using SLEEP. Handy in situations where you can run a query but can't get it reflected in the server's output.
- cottenio 8y agoThis is a valuable point: you can absolutely exfiltrate data this way based on timing, and it's fairly automated with tools at this point.