We'll be presenting our talk on temporary email addresses at #BHMEA24 on the 26th of November. Looking forward! CC: @k4kTuSS @capstone_engine

Hakuin, a blazing fast Blind SQL Injection framework, made it to BlackHat Middle East & Africa this year! Come check out my two sessions (14 Nov 3pm, 15 Nov 5pm) at the arsenal track. Hakuin: github.com/pruzko/hakuin #BHMEA #BHMEA23

Thanks for the shout-out. BTW the framework is actively developed and new features are added!

My point here is that if you deduplicate the "users_sex" column then you'll get "male" & "female" but there is no way you can tell which users are male/female (without additional requests). Same goes for "product_category". I like the feature tho, will probably do it as well.

You can have parallelism on bit/character/column level and achieve the same performance. One advantage I see with bit-extraction is that it can be easily combined with single-request-multiple-bits extraction (see "Blind sql injection attacks optimization" by Ruben Ventura).

Hey, thx for finding time to read our paper, I'll try to address your comments.

Just presented our paper "Hakuin: Optimizing Blind SQL Injection with Probabilistic Language Models" at @wootsecurity. Thanks everyone for making WOOT23 a great experience! Paper: wootconference.org/papers/wo… Slides: wootconference.org/slides/17… cc: @capstone_engine