Using Binary Search Algorithms for Blind SQL Injection

Explore an innovative approach to blind SQL injection using binary search algorithms in this 32-minute OWASP Foundation talk by Juan Pablo Quiñe Paz. Discover how fundamental programming techniques can be applied to real-world pentesting scenarios, improving efficiency and reducing noise in white box testing. Learn about the speaker's journey from theoretical exercises to practical application, as he demonstrates how to leverage binary search algorithms to optimize blind SQL injection attacks. Gain insights into the lab setup, script explanation, and comparison with sequential search methods, providing valuable knowledge for both aspiring and experienced security professionals.

Introduction
About Juan Pablo
Agenda
Background
What is blind
Blind sql injection
Binary search algorithm
Binary search example
Lab
Lab setup
Script explanation
Request function
Validation
Mixing
Injection
Binary search
Script
Sequential search