blind-injection

What problem does it solve?

Blind injection scenarios are hard to prove when outputs are not reflected or visible. This skill provides structured methods to detect and prove blind injection surfaces using OOB callbacks, time-based delays, and boolean differences within authorized bug bounty engagements.

Core Features & Use Cases

• Systematic detection of blind injection surfaces where input is processed server-side but no output is observed, or the response is identical across payloads.
• Step-by-step payload strategies for blind SQL injection (time-based and boolean-based), blind SSRF, blind XXE, blind Command Injection, and blind XSS, including OOB infrastructure setup and verification criteria.
• Guidance on evidence collection, callback verification, and escalation paths for robust proof of concepts in production-like targets.

Quick Start

Begin a blind-injection assessment by identifying surfaces and selecting an initial payload strategy.