diff --git a/detection.html b/detection.html index 5013907..7feeff2 100644 --- a/detection.html +++ b/detection.html @@ -93,7 +93,8 @@

Detecting Injections

Arithmetic - product.asp?id=1/1 -- true
product.asp?id=1/0 -- false + product.asp?id=1/1 -- true
product.asp?id=1/0 -- false
+ product.asp?id=1/abs(1) -- true
product.asp?id=1/abf(1) -- false Blind based
Note: Detecting blind injection may require identification or guess-and-check of the DBMS to find the proper timing function.