Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Blind SQL lab.1

Nikita | Last updated: Feb 07, 2022 04:42PM UTC

Hello everyone, I started to go through blind injections and ran into a misunderstanding of some requests ... ... Here: xyz' AND '1'='1 …xyz' AND '1'='2 I don't understand what those quotes ' ' are, in the first one they close with '1' and in the second there is no '1 . Does anyone know why? If anyone has, throw off an example of a sql query

Ben, PortSwigger Agent | Last updated: Feb 08, 2022 08:10AM UTC

Hi Nikita, You are using the single quotes to manipulate the underlying SQL query that the web application is making. The query being used is likely to be something similar to this (using a made up TrackingID value): SELECT TrackingId FROM TrackedUsers WHERE TrackingId = 'abcdefg' By entering the injection suggested in the solution you are manipulating the SQL query being used to be (note how you are using the single quotes to change the nature of what the SQL query is doing): SELECT TrackingId FROM TrackedUsers WHERE TrackingId = 'abcdefg' AND '1'='1' This allows you to use the AND conditional statement to determine what happens both when the statement is true and when the statement is false.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.