Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Discover table name using time-based SQL injection

nth347 | Last updated: Mar 25, 2020 05:29PM UTC

Hello guys, I try to gather information about the table name (Users) by using the time-based technique, first I use the following query to determine the length of the table name. But I can not use the percent sign (%), it causes HTTP error code 500. Please help me. TrackingId=x'3BSELECT+CASE+WHEN+((SELECT+LENGTH(table_name)+FROM+information_schema.tables+WHERE+table_name+LIKE+'user%')=$1$)+THEN+pg_sleep(10)+ELSE+pg_sleep(0)+END-- PS: URL encoding for % does not help. Payload $1$ from 1 to 8.

Michelle, PortSwigger Agent | Last updated: Mar 26, 2020 08:55AM UTC