2 ms·
This is especially true when you realize that timing attacks don't even need SLEEP in the first place. You just need to hang the database for a measurable amoun
by QuinnWilton 8y ago
This is especially true when you realize that timing attacks don't even need SLEEP in the first place. You just need to hang the database for a measurable amount of time, like this injection will do:
AND 1 IN (SELECT BENCHMARK(SOME_MULTIPLIER*15000000,MD5(CHAR(97))))--