blind-injection

Prove blind SQL injection by using boolean-based differences or time-based delays to infer query execution. This skill provides structured payload workflows and verification criteria to systematically detect and document these blind injection surfaces.

Detect blind SSRF and blind XXE using out-of-band (OOB) callback infrastructure. This skill guides you through setting up external listeners to capture DNS or HTTP interactions, verifying server-side processing when responses are identical across payloads.

Verify OOB callbacks during a blind injection assessment by configuring external infrastructure to log DNS and HTTP interactions. This skill provides guidance on evidence collection, callback verification, and escalation paths for robust proof of concepts.

Yes, you can use time-based payloads to find blind command injection across multiple DBMSs. This skill implements cross-technique payload variants and detection signals to identify timing differences in authorized bug bounty engagements.

Blind XSS requires external infrastructure setup to confirm execution when input is processed without visible output. This skill provides payload strategies and OOB verification criteria to capture callback evidence from production-like targets.

Avoid boolean-based techniques for blind injection detection when server responses are identical across all payloads or lack measurable differences. In these scenarios, switch to time-based delays or OOB callbacks to verify server-side processing.