# Resources & Tools

## Resources

* [https://portswigger.net/web-security/sql-injection/blind](https://portswigger.net/web-security/sql-injection/blind)
* [https://owasp.org/www-community/attacks/Blind\_SQL\_Injection](https://owasp.org/www-community/attacks/Blind_SQL_Injection)
* [https://cheatsheetseries.owasp.org/cheatsheets/SQL\_Injection\_Prevention\_Cheat\_Sheet.html](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html)
* See the OWASP code review guide Section A1 [https://owasp.org/www-pdf-archive/OWASP\_Code\_Review\_Guide\_v2.pdf](https://owasp.org/www-pdf-archive/OWASP_Code_Review_Guide_v2.pdf)
* [more Advanced SQL Injection](https://www.nccgroup.com/Libraries/Document_Downloads/more__Advanced_SQL_Injection.sflb.ashx) - by NGS
* [Blind SQL Injection Automation Techniques](https://www.blackhat.com/presentations/bh-usa-04/bh-us-04-hotchkies/bh-us-04-hotchkies.pdf) - Black Hat Pdf
* [Blind Sql-Injection in MySQL Databases](http://seclists.org/lists/bugtraq/2005/Feb/0288.html)
* [Cgisecurity.com: What is Blind SQL Injection?](http://www.cgisecurity.com/questions/blindsql.shtml)
* Kevin Spett from SPI Dynamics:
  * [http://www.net-security.org/dl/articles/Blind\_SQLInjection.pdf](http://www.net-security.org/dl/articles/Blind_SQLInjection.pdf)
  * [http://www.imperva.com/resources/whitepapers.asp?t=ADC](http://www.imperva.com/resources/whitepapers.asp?t=ADC)
  * [Advanced SQL Injection](https://wiki.owasp.org/images/7/74/Advanced_SQL_Injection.ppt)
* [https://dev.mysql.com/doc/refman/8.0/en/select.html](https://dev.mysql.com/doc/refman/8.0/en/select.html)

## Tools&#x20;

* [SQL Power Injector](http://www.sqlpowerinjector.com/)
* [Absinthe :: Automated Blind SQL Injection](https://github.com/cameronhotchkies/Absinthe)
* [SQLBrute - Multi Threaded Blind SQL Injection Bruteforcer](http://www.securiteam.com/tools/5IP0L20I0E.html) in Python
* [SQLiX - SQL Injection Scanner](https://owasp.org/www-community/attacks/:Category:OWASP_SQLiX_Project) in Perl
* [sqlmap, automatic SQL injection tool](http://sqlmap.org/) in Python
* [bsqlbf, a blind SQL injection tool](https://code.google.com/p/bsqlbf-v2/) in Perl
* Burpsuite&#x20;

##
