BW90b3JvbGEgcjI2MDAgc2VydmljZSBtYW51YWwucmFybGtqaAbW9 WAITFOR DELAY '0:0:5' -- http://tlniurl.com/1m4ao0
733888b65d If the first letter of the first database's name is an 'B', wait for 10 seconds. etc. Microsoft SQL Server. http://www.site.com/vulnerable.php?id=1' waitfor delay .... Is this a viable solution for the WAITFOR attack? ... The WAITFOR trick is most likely just being used for 'sniffing' for the vulnerability; once .... IF (1=1) WAITFOR DELAY '0:0:10'--. The first of these inputs will not trigger a delay, because the condition 1=2 is false. The second input will trigger a delay of 10 .... The easiest way to cause a delay is to use the WAITFOR DELAY clause, if the RDBMS supports it. If that's not possible, the attacker can use a time-intensive operation to obtain a delay for the “yes” answer. If the answer is true, the server will execute WAITFOR DELAY '0:0:5' , causing it to wait for 5 seconds.. ... 'O', 'O'); * OR '1'='1 'O:0:15°;-- waitfor delay 'O:0:15°;-- ';waitfor delay 1', 'O', 'O');waitfor 1 AND 1=1 1 * AND 'O:0:15?-- delay '0:0:15';-- "1"–71 ;waitfor delay 1, .... Specifies the period of time, in milliseconds, to wait for a message to arrive on ... Including WAITFOR will slow the completion of the SQL Server ...