From 9a1be29b45432e514f8f0bbc861af7687f19afcd Mon Sep 17 00:00:00 2001
From: Bernardo Damele <bernardo.damele@gmail.com>
Date: Mon, 13 Jan 2014 17:12:59 +0000
Subject: [PATCH] updated test cases for regression test

---
 xml/livetests.xml | 52 +++++++++++++++++++++++------------------------
 1 file changed, 25 insertions(+), 27 deletions(-)

diff --git a/xml/livetests.xml b/xml/livetests.xml
index 1f58b627d..c91bb04f5 100644
--- a/xml/livetests.xml
+++ b/xml/livetests.xml
@@ -288,13 +288,13 @@
             <getColumns value="True"/>
             <getCount value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <excludeSysDbs value="True"/>
         </switches>
         <parse>
             <item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
-            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 8.4.0 and &lt; 9.0.0'"/>
+            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 9.1.0'"/>
             <item value="banner:    'PostgreSQL 9.1.11 on i686-pc-linux-gnu, compiled by gcc (Debian 4.7.2-5) 4.7.2, 32-bit'"/>
             <item value="current user:    'postgres'"/>
             <item value="current schema (equivalent to database on PostgreSQL):    'public'"/>
@@ -330,14 +330,14 @@
             <getColumns value="True"/>
             <getCount value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <excludeSysDbs value="True"/>
             <answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
         </switches>
         <parse>
             <item value="Title: PostgreSQL AND error-based - WHERE or HAVING clause"/>
-            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 8.4.0 and &lt; 9.0.0'"/>
+            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 9.1.0'"/>
             <item value="banner:    'PostgreSQL 9.1.11 on i686-pc-linux-gnu, compiled by gcc (Debian 4.7.2-5) 4.7.2, 32-bit'"/>
             <item value="current user:    'postgres'"/>
             <item value="current schema (equivalent to database on PostgreSQL):    'public'"/>
@@ -373,14 +373,14 @@
             <getColumns value="True"/>
             <getCount value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <excludeSysDbs value="True"/>
             <answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
         </switches>
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
-            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 8.4.0 and &lt; 9.0.0'"/>
+            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 9.1.0'"/>
             <item value="banner:    'PostgreSQL 9.1.11 on i686-pc-linux-gnu, compiled by gcc (Debian 4.7.2-5) 4.7.2, 32-bit'"/>
             <item value="current user:    'postgres'"/>
             <item value="current schema (equivalent to database on PostgreSQL):    'public'"/>
@@ -416,14 +416,14 @@
             <getColumns value="True"/>
             <getCount value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <excludeSysDbs value="True"/>
             <answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
         </switches>
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
-            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 8.4.0 and &lt; 9.0.0'"/>
+            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 9.1.0'"/>
             <item value="banner:    'PostgreSQL 9.1.11 on i686-pc-linux-gnu, compiled by gcc (Debian 4.7.2-5) 4.7.2, 32-bit'"/>
             <item value="current user:    'postgres'"/>
             <item value="current schema (equivalent to database on PostgreSQL):    'public'"/>
@@ -487,14 +487,14 @@
             <getColumns value="True"/>
             <getCount value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <excludeSysDbs value="True"/>
             <answers value="do you want to perform a dictionary-based attack against retrieved password hashes=N"/>
         </switches>
         <parse>
             <item value="Title: PostgreSQL inline queries"/>
-            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 8.4.0 and &lt; 9.0.0'"/>
+            <item value="r'back-end DBMS: active fingerprint: PostgreSQL &gt;= 9.1.0'"/>
             <item value="banner:    'PostgreSQL 9.1.11 on i686-pc-linux-gnu, compiled by gcc (Debian 4.7.2-5) 4.7.2, 32-bit'"/>
             <item value="current user:    'postgres'"/>
             <item value="current schema (equivalent to database on PostgreSQL):    'public'"/>
@@ -905,7 +905,7 @@
         <parse>
             <item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
             <item value="r'back-end DBMS: active fingerprint: SQLite 3'"/>
-            <item value="banner:    '3.7.3'"/>
+            <item value="banner:    '3.7.13'"/>
             <item value="r'Database: SQLite_masterdb.+1 table.+users'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+3 columns.+surname.+TEXT'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+5 entries.+luther.+nameisnull.+'"/>
@@ -938,7 +938,7 @@
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
             <item value="r'back-end DBMS: active fingerprint: SQLite 3'"/>
-            <item value="banner:    '3.7.3'"/>
+            <item value="banner:    '3.7.13'"/>
             <item value="r'Database: SQLite_masterdb.+1 table.+users'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+3 columns.+surname.+TEXT'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+5 entries.+luther.+user agent.+'"/>
@@ -970,7 +970,7 @@
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
             <item value="r'back-end DBMS: active fingerprint: SQLite 3'"/>
-            <item value="banner:    '3.7.3'"/>
+            <item value="banner:    '3.7.13'"/>
             <item value="r'Database: SQLite_masterdb.+1 table.+users'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+3 columns.+surname.+TEXT'"/>
             <item value="r'Database: SQLite_masterdb.+Table: users.+5 entries.+luther.+user agent.+'"/>
@@ -988,7 +988,7 @@
         <parse>
             <item value="Title: SQLite &gt; 2.0 AND time-based blind (heavy query)"/>
             <item value="r'back-end DBMS: active fingerprint: SQLite 3'"/>
-            <item value="banner:    '3.7.3'"/>
+            <item value="banner:    '3.7.13'"/>
         </parse>
     </case>
     <case name="SQLite inline queries multi-threaded enumeration - all entries">
@@ -1049,7 +1049,7 @@
         <parse>
             <item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
             <item value="r'back-end DBMS: active fingerprint: Firebird 2.1 \(dialect 3\)'"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user:    'SYSDBA'"/>
             <item value="r'current database:    '/'"/>
             <item value="current user is DBA:    True"/>
@@ -1088,7 +1088,7 @@
         <parse>
             <item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
             <item value="r'back-end DBMS: active fingerprint: Firebird 2.1 \(dialect 3\)'"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user:    'SYSDBA'"/>
             <item value="r'current database:    '/'"/>
             <item value="current user is DBA:    True"/>
@@ -1127,7 +1127,7 @@
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
             <item value="r'back-end DBMS: active fingerprint: Firebird 2.1 \(dialect 3\)'"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user:    'SYSDBA'"/>
             <item value="r'current database:    '/'"/>
             <item value="current user is DBA:    True"/>
@@ -1166,7 +1166,7 @@
         <parse>
             <item value="Title: Generic UNION query (NULL) - 3 columns"/>
             <item value="r'back-end DBMS: active fingerprint: Firebird 2.1 \(dialect 3\)'"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user:    'SYSDBA'"/>
             <item value="r'current database:    '/'"/>
             <item value="current user is DBA:    True"/>
@@ -1191,7 +1191,7 @@
         </switches>
         <parse>
             <item value="Title: Firebird AND time-based blind (heavy query)"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user is DBA:    True"/>
         </parse>
     </case>
@@ -1221,7 +1221,7 @@
         <parse>
             <item value="Title: Firebird inline queries"/>
             <item value="r'back-end DBMS: active fingerprint: Firebird 2.1 \(dialect 3\)'"/>
-            <item value="banner:    '2.5.0'"/>
+            <item value="banner:    '2.5.2'"/>
             <item value="current user:    'SYSDBA'"/>
             <item value="r'current database:    '/'"/>
             <item value="current user is DBA:    True"/>
@@ -1296,7 +1296,7 @@
             <tech value="E"/>
             <getSchema value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <limitStart value="2"/>
             <limitStop value="4"/>
@@ -1314,7 +1314,7 @@
             <tech value="U"/>
             <getSchema value="True"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <limitStart value="2"/>
             <limitStop value="4"/>
@@ -1331,7 +1331,7 @@
             <threads value="4"/>
             <tech value="B"/>
             <dumpTable value="True"/>
-            <db value="testdb"/>
+            <db value="public"/>
             <tbl value="users"/>
             <firstChar value="3"/>
             <lastChar value="5"/>
@@ -3216,13 +3216,12 @@
     <!-- End of file system access switches -->
 
     <!-- Operating system access switches -->
-    <!--
     <case name="MySQL web shell - command execution">
         <switches>
             <url value="http://debian/sqlmap/mysql/get_int.php?id=1"/>
             <tech value="B"/>
             <osCmd value="id"/>
-            <answers value="please provide additional comma separated file paths to=test"/>
+            <answers value="what do you want to use for writable directory=2,please provide a comma separate list of absolute directory paths=/var/www/test"/>
         </switches>
         <parse>
             <item value="command standard output:    'uid="/>
@@ -3234,13 +3233,12 @@
             <tech value="BU"/>
             <osPwn value="True"/>
             <msfPath value="/usr/local/bin/"/>
-            <answers value="please provide additional comma separated file paths to=/var/www/test,do you want to overwrite it=Y,which connection type do you want to use=2"/>
+            <answers value="what do you want to use for writable directory=2,please provide a comma separate list of absolute directory paths=/var/www/test"/>
         </switches>
         <parse>
             <item value="r'Sending stage.+Linux.+uid=.+www-data'" console_output="True"/>
         </parse>
     </case>
-    -->
     <case name="PostgreSQL User-Defined Function (UDF) injection - command execution (UNION)">
         <switches>
             <url value="http://debian/sqlmap/pgsql/get_int.php?id=1"/>