"Boolean based" we mean that it is based on Boolean values, that is, true or false / true and false. AND Time- based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the database to wait for a specified amount of time (in seconds) before responding. The response time will indicate to the attacker whether the result of the query is TRUE or FALSE.
Boolean-based (content-based) Blind SQLi
Boolean-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the application to return a different result depending on whether the query returns a TRUE or FALSE result.
Depending on the result, the content within the HTTP response will change, or remain the same. This allows an attacker to infer if the payload used returned true or false, even though no data from the database is returned. This attack is typically slow (especially on large databases) since an attacker would need to enumerate a database, character by character.
Time-based Blind SQLi
Time-based SQL Injection is an inferential SQL Injection technique that relies on sending an SQL query to the database which forces the database to wait for a specified amount of time (in seconds) before responding. The response time will indicate to the attacker whether the result of the query is TRUE or FALSE.
Depending on the result, an HTTP response will be returned with a delay, or returned immediately.
This allows an attacker to infer if the payload used returned true or false, even though no data from the database is returned. This attack is typically slow (especially on large databases) since an attacker would need to enumerate a database character by character.
https://www.acunetix.com/websitesecurity/sql-injection2/

To block NetBIOS and related Windows networking traffic from traversing a firewall (especially from external sources), you should block the following ports:
Port 135 (TCP/UDP): Microsoft RPC endpoint mapper (DCOM/RPC)
Port 139 (TCP): NetBIOS Session Service
Port 445 (TCP): Direct-hosted SMB over TCP/IP (Windows 2000+)
These ports are commonly used for:
File sharing
RPC-based communication
Windows network services
From CEH v13 Official Courseware:
Module 3: Scanning Networks
Module 4: Enumeration
CEH v13 Study Guide states:
"To prevent external enumeration, remote file sharing, and NetBIOS attacks, administrators should block inbound access to ports 135, 139, and 445 on the firewall." Incorrect Options:
A (110): POP3 mail service
D (161): SNMP
F (1024): High ephemeral port; not specific to NetBIOS
Reference:CEH v13 Study Guide - Module 4: Enumeration # NetBIOS Enumeration PreventionMicrosoft Security Best Practices - Block SMB Ports (135-139, 445)
======

The total data extracted by the attacker is E=xyz'u', where x is the number of tables, y is the number of columns, z is the number of records, and u is the number of SQL payloads. To maximize E, the attacker would want to choose the highest values of z and u, while keeping x and y constant. Therefore, the situation where z=600 and u=2 would result in the highest extracted data volume, as E=42600*2=9600. The other situations would result in lower values of E, as shown below:
* A: E=42400*4=12800
* B: E=42550*2=8800
* D: E=42500*3=12000
The attacker uses UNION SELECT statements to combine the results from different tables and columns, and DBMS_XSLPPOCESSOR.READ2CLOB to read sensitive files from the database server12. These techniques can bypass input validation and pattern matching measures that are based on the application's responses3.
References:
* 1: DBMS_XSLPROCESSOR - Oracle Help Center
* 2: DBMS_XSLPROCESSOR.READ2CLOB Example Script to Read a file data into ...
* 3: Attack Surface Analysis - OWASP Cheat Sheet Series