Certified Ethical Hacker (CEH) Practice Question

Because the application never reveals database error messages and does not noticeably slow down, the tester cannot rely on error-based or time-based techniques. Instead, the different application behavior that depends solely on the truth value of the injected Boolean condition (1=1 versus 1=2) indicates a Boolean-based blind SQL injection. Union-based attacks require the application to reflect query results, which is not happening here. Time-based blind attacks rely on measurable delays, and out-of-band attacks require external channels such as DNS or HTTP callbacks-neither of which are observed.