BlindStrike v7.0.0

BlindStrike v7.0.0

🚀 Major Release

BlindStrike v7.0.0 is the first stable major release of the project, consolidating the previous 2.x development releases into a unified time-based and boolean-based blind SQL injection detection framework.

What's New

• Time-based blind SQL injection detection with database-specific payload sets.
• Boolean-based blind SQL injection detection using TRUE/FALSE response comparison.
• Baseline-aware timing analysis to reduce false positives caused by slow targets and network jitter.
• Automatic confirmation retesting for flagged findings.
• Precise FUZZ injection-point support.
• GET, POST, PUT, PATCH, and header injection support.
• Multi-threaded scanning.
• Burp Suite proxy support.
• JSON, CSV, and HTML reporting.
• Guided interactive setup wizard.
• --stop-on-confirm scanning option.
• Persistent Telegram configuration.
• Real-time Telegram alerts for confirmed findings.
• Telegram report-file delivery.
• Improved HTML reports with proof-of-concept details.
• Offline unit test suite.
• Improved Telegram token validation and sanitization.

Important v7.0.0 Fix

Fixed the Telegram 404 Not Found issue caused by malformed or whitespace-contaminated bot tokens. Telegram credentials are now sanitized and validated before network requests.

Detection Scope

BlindStrike is intentionally focused on:

• Time-based blind SQL injection detection
• Boolean-based blind SQL injection detection

It does not perform automated data extraction, error-based SQL injection, or OOB SQL injection.

Testing

The project includes an offline unit-test suite covering core functionality including URL handling, boolean detection logic, Telegram configuration, confirmation behavior, and report generation.

⚠️ Authorized Use

BlindStrike is intended for authorized penetration testing, bug bounty programs within defined scope, security research, and educational use. Always obtain appropriate authorization before testing a target.

Full Changelog: v7.0.0...v7.0.0

Blind-SQLi v1.0.0 - Initial Release

Initial release of Blind-SQLi by Vaelion.

Features:

• Time-based Blind SQLi detection
• MySQL/MSSQL/PostgreSQL/Oracle payload support
• Multi-threaded scanning
• JSON reporting
• CLI interface

Built for authorized security testing and research.