PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-01-30 18:19:07 +00:00
Code Issues Projects Releases Wiki Activity

Final commit for #120

Browse Source
This commit is contained in:
Miroslav Stampar
2018-09-05 23:29:52 +02:00
parent 91c5151770
commit ac481492c0
6 changed files with 59 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
xml/boundaries.xml
View File

@@ -54,6 +54,7 @@ Tag: <boundary>
3: LIKE single quoted string
4: Double quoted string
5: LIKE double quoted string
6: Identifier (e.g. column name)
Sub-tag: <prefix>
A string to prepend to the payload.
@@ -491,20 +492,29 @@ Formats:
<!-- Escaped column name (e.g. SELECT `...` FROM table) boundaries -->
<boundary>
<level>4</level>
<clause>1</clause>
<clause>8</clause>
<where>1</where>
<ptype>1</ptype>
<prefix>`</prefix>
<suffix> AND `[ORIGINAL]</suffix>
<ptype>6</ptype>
<prefix>`=`[ORIGINAL]`</prefix>
<suffix> AND `[ORIGINAL]`=`[ORIGINAL]</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>1</clause>
<clause>8</clause>
<where>1</where>
<ptype>1</ptype>
<prefix>"=[ORIGINAL]</prefix>
<suffix> AND [ORIGINAL]="[ORIGINAL]</suffix>
<ptype>6</ptype>
<prefix>"="[ORIGINAL]"</prefix>
<suffix> AND "[ORIGINAL]"="[ORIGINAL]</suffix>
</boundary>
<boundary>
<level>5</level>
<clause>8</clause>
<where>1</where>
<ptype>6</ptype>
<prefix>]=[[ORIGINAL]]</prefix>
<suffix> AND [[ORIGINAL]]=[[ORIGINAL]</suffix>
</boundary>
<!-- End of escaped column name boundaries -->