v801

Time-Based Blind SQL Injection

Indication of a correct query is based on the time the query takes to complete.
This time delay is introduced by using built-in methods such as SLEEP(x) alongside the UNION statement.
The SLEEP() method will only ever get executed upon a successful UNION SELECT statement.

Base query example

/endpoint?query=admin123' 

Attack query example

v801

ForegroundColour=223,219,223
BackgroundColour=4,4,4
CursorColour=255,128,0
Black=4,4,4
BoldBlack=4,4,4
Red=181,59,80
BoldRed=181,59,80
Green=6,234,97
BoldGreen=6,234,97
Yellow=218,232,77

v801

{
  "key": "ctrl+k",
  "command": "workbench.action.focusActiveEditorGroup",
  "when": "terminalFocus"
},
{
  "key": "ctrl+j",
  "command": "workbench.action.terminal.focus",
  "when": "!terminalFocus"
},

v801

⠀⠀:g_heart::g_heart::g_heart:⠀⠀⠀⠀⠀⠀:g_heart::g_heart::g_heart:
:g_heart::g_heart::g_heart::g_heart::g_heart:⠀⠀:g_heart::g_heart::g_heart::g_heart::g_heart:
:g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart:
:g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart:
⠀⠀:g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart:
⠀⠀⠀⠀:g_heart::g_heart::g_heart::g_heart::g_heart::g_heart::g_heart:
⠀⠀⠀⠀⠀⠀:g_heart::g_heart::g_heart::g_heart::g_heart:
⠀⠀⠀⠀⠀⠀⠀⠀:g_heart::g_heart::g_heart:
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀:g_heart:

v801

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.some.name.dailybackup</string>
    <key>ProgramArguments</key>
    <array>
      <string>/full/path/to/script/daily-backup.sh</string>
    </array>

v801

#!/bin/bash

date "+%n%Y-%m-%d // %I:%M:%S"
rsync --ignore-existing -raz --progress /full/path/to/source/ /full/path/to/destination/

v801

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>ANSIBlackColor</key>
	<data>
	YnBsaXN0MDDUAQIDBAUGFRZYJHZlcnNpb25YJG9iamVjdHNZJGFyY2hpdmVyVCR0b3AS
	AAGGoKMHCA9VJG51bGzTCQoLDA0OVU5TUkdCXE5TQ29sb3JTcGFjZVYkY2xhc3NPECcw
	LjEwMTk2MDc4NDMgMC4xMDE5NjA3ODQzIDAuMTAxOTYwNzg0MwAQAoAC0hAREhNaJGNs
	YXNzbmFtZVgkY2xhc3Nlc1dOU0NvbG9yohIUWE5TT2JqZWN0XxAPTlNLZXllZEFyY2hp