#sqlmap

Blind SQL Injection in a Login Form: How One Request Leaked a Database

I sent one login request to a news website and got a ten-second delay back. That delay was enough to read an entire database, one bit at a time. Here is how time-based blind SQL injection really works, and the one fix that kills it.