EIP-2026-103309

This exploit performs a time-based blind SQL injection attack to extract username and password from a vulnerable web application. It uses RC4 encryption for a 'knock' string and brute-forces character lengths and values via timing delays.