AmazingCryptoWAF -

[@BugBountyReportsExplained]

Welcome to the comment section! I hope you enjoyed the video. If you did, make sure to like it 👍 and subscribe to the channel: ruclips.net/user/BugBountyReportsExplained

[@kh0kh0]

Great explanation!! You could combine binary search and Limit

[@kh0kh0]

But it would overcomplicate solution even more.

[@kh0kh0]

Oh i think I am wrong. I believe you can't get better solution that yours because binary search would still need 6 queries to extract 7 letters so it's just a 7/6 times speedup.

[@BugBountyReportsExplained]

Nice! I think it would be an improvement. In the worst complexity not but if we take 3 tests per character as an average , it gives us 200*3 = 600 tests but we can do 7 tests in 1 request so 600/7 ~= 86 requests compared to my 200.
It is also possible to limit the number of requests prior the attack. 64 notes is enough as base64 charset only uses 64 characters. But I'd have to add more logic to the SQL query because those are not siblings in the ascii table.
There might also be a possibility to extract more data using OFFSET clause.

[@georgehammond867]

Well done dude, was not easy challenge.

[@saketsrv9068]

You are such a genuis guy...

[@BugBountyReportsExplained]

haha I'm not. It's nothing more than experience

[@cyberbytes6653]

Really interesting. Great work.

[@BugBountyReportsExplained]

Many thanks!

[@rafajanicki2456]

Awesome video :)
No doubt you have some really l33t skills :D

[@BugBountyReportsExplained]

Thanks 😁

[@chaysx177]

amazing, well done!

[@BugBountyReportsExplained]

Thank you! Cheers!

[@danielgrunberger2621]

So you point his video and he point yours. lol. cool video bro :)

[@BugBountyReportsExplained]

thanks ;)

[@twobob]

good effort.

[@BugBountyReportsExplained]

Thanks 👍