Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|
A tool for blind SQL injection data extraction using timing-based techniques.
pip install .import MySQLdb
from sqlblindextract import getdata
db = MySQLdb.connect(host="localhost", user="root", passwd="password", db="mysql")
cursor = db.cursor()
result = getdata(cursor, "password", "user", "user='root' limit 1")
print(result)sqlblindextract --helpUsage: sqlblindextract [OPTIONS] Extract data from SQL database using blind injection timing techniques. Options: -h, --host TEXT Database host (default: localhost) -u, --user TEXT Database user [required] -p, --password TEXT Database password [required] -d, --db TEXT Database name [required] -t, --table TEXT Table name [required] -f, --field TEXT Field name to extract [required] -w, --where TEXT WHERE clause condition [required] --iters INTEGER Number of benchmark iterations (default: 500000) --sensitivity INTEGER Time sensitivity threshold (default: 100) --help Show this message and exit.
Execute a SQL query and return execution time in seconds.
getlength(cursor, field: str, table: str, where: str, iters: int = 500000, sensitivity: int = 100) -> int
Extract the length of a field value using blind injection timing.
getbits(cursor, pos: int, field: str, table: str, where: str, iters: int = 500000, sensitivity: int = 100) -> int
Extract a single character's bitmask at given position.
getdata(cursor, field: str, table: str, where: str, iters: int = 500000, sensitivity: int = 100, max_length: int = 1000) -> str
Extract the complete value from a field using blind injection.
git clone https://github.com/daedalus/sqlblindextract.git
cd sqlblindextract
pip install -e ".[test]"
# run tests
pytest
# format
ruff format src/ tests/
# lint
ruff check src/ tests/
# type check
mypy src/