Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve boolean blind injection #5797

Open
Strongys90 opened this issue Nov 1, 2024 · 0 comments
Open

Improve boolean blind injection #5797

Strongys90 opened this issue Nov 1, 2024 · 0 comments

Comments

@Strongys90
Copy link

About a year ago a new open source tool came out called hakuin https://github.com/pruzko/hakuin made for faster boolean blind data extraction. it is extremely quick.
Hakuin, a new open-source framework that leverages Machine Learning and statistics to optimize BSQLI. Hakuin uses probabilistic language models trained on millions of tables and columns extracted from Stack Exchange questions to infer DB schemas. To infer DB content, it utilizes several strategies including adaptive language models and opportunistic string guessing. Compared to the state-of-the-art (SOTA) BSQLI tools, Hakuin is about 6x faster on DB schemas, up to 3.2x faster on normal DB columns, and up to 26x faster on columns with limited values.

Just a suggestion to rework boolean blind injection methodology in sqlmap taking it from hakuin to make data extracting from boolean based injection faster.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant