What is BSQL or Blind SQL Injection?


"BSQL is an acronym of Blind SQL Injection, a sort of SQL Injection, used when a customized error page is sets as a substitute of database error message in order to increase database complexity for intruders."

Blind SQL Injection or BSQL is a kind of SQL Injection, which is used to find out vulnerabilities in a database system to exploit. Blind SQL is similar to SQL Injection because in both ways an intruder try to steal digital identities or data from a database system in order to exploitation.
To Increase the SQL Injection complexity a developer or application programmer sets an error page as a substitute of database error message. So when a hacker apply SQL Injection attack on a database system a customized error page is returned except database error message, which makes that intruder or hacker blind to exploit with database. Eventually, this problem for hackers raise to create a new kind of SQL Injection to attack blindly on the database, so called Blind SQL Injection.

In BSQL Injection hackers or intruders apply multiple SQL queries again and again with different inputs and true or false values, in order to find out database vulnerability. If there is any loophole or vulnerability found by them, they use it to exploit with database. To consider more about BSQL Injection, learn my SQL Injection post. Complexity of BSQL Injection is higher than SQL Injection because intruders has to attend lots of attempts to find out vulnerabilities.
Now you can guess if your database vulnerabilities are found by hackers and your database holds some sensitive information, then how much it can harm you.

So we have learned now, What is BSQL or Blind SQL Injection? And what are the consequences of this attack ,if you don't know about such things you're database can be hacked, guess it on your own, keep learning from computerflicks. Please leave comments.

Comments

Popular posts from this blog

How do you host your website on free web hosting services or free web hosting sites?

Meaning of ping, Ip config, Trace-rt and netstat commands in Networking.