sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-23 15:10:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

test if boolean also works correctly for --os-cmd

Browse Source
This commit is contained in:
Bernardo Damele 2013-01-16 15:36:35 +00:00
parent 6f08d10d07
commit 74286e339f
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
xml/livetests.xml
View File

@ -1972,7 +1972,7 @@
<item value="r'Sending stage.+Linux.+uid=.+www-data'" console_output="True"/>
</parse>
</case>
<case name="PostgreSQL User-Defined Function (UDF) injection - command execution">
<case name="PostgreSQL User-Defined Function (UDF) injection - command execution (UNION)">
<switches>
<url value="http://debiandev/sqlmap/pgsql/get_int.php?id=1"/>
<tech value="US"/>
@ -1983,6 +1983,17 @@
<item value="command standard output: 'uid="/>
</parse>
</case>
<case name="PostgreSQL User-Defined Function (UDF) injection - command execution (boolean)">
<switches>
<url value="http://debiandev/sqlmap/pgsql/get_int.php?id=1"/>
<tech value="BS"/>
<osCmd value="ls -1"/>
<answers value="do you want to overwrite it=Y"/>
</switches>
<parse>
<item value="r'command standard output:.+base.+PG_VERSION.+server.key'"/>
</parse>
</case>
<case name="PostgreSQL shell via Metasploit integration - command execution">
<switches>
<url value="http://debiandev/sqlmap/pgsql/get_int.php?id=1"/>