I'm following this tutorial on Pentesterlab about SQLi, and they're talking about Blind SQL. From what I thought blind SQLi was needed when you don't see (error) output from your target, and you can only use fase/right/slow/fast to see if your query is true or works.
But in that tutorial they start about bit masking and I don't know whatever. I know that bitmasking exists out of:
- Extracting: AND (used in this tutorial)
- Setting subset: OR
- Toggling: XOR
And 'AND' works example like this:
Only '1' where value and mask are '1'.
However, how is this used in Blind SQLi? And why that script they use in the tutorial?
tl;dr Why do they use bitmasking in Blind SQLi, I guess I don't understand Blind SQLi completely.