http://www.kitploit.com/2017/10/blisqy-exploit-time-based-blind-sql.html?m=0
Blisqy - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB)