@@ -61,12 +61,12 @@ def vulnTest():
6161 ("-u <url> --flush-session --null-connection --technique=B --tamper=between,randomcase --banner" , ("NULL connection is supported with HEAD method" , "banner: '3." )),
6262 ("-u <url> --flush-session --parse-errors --test-filter=\" subquery\" --eval=\" import hashlib; id2=2; id3=hashlib.md5(id.encode()).hexdigest()\" --referer=\" localhost\" " , ("might be injectable" , ": syntax error" , "back-end DBMS: SQLite" , "WHERE or HAVING clause (subquery" )),
6363 ("-u <url> --banner --schema --dump -T users --binary-fields=surname --where \" id>3\" " , ("banner: '3." , "INTEGER" , "TEXT" , "id" , "name" , "surname" , "2 entries" , "6E616D6569736E756C6C" )),
64- ("-u <url> --technique=U --fresh-queries --force-partial --dump -T users --answers=\" crack=n\" -v 3" , ("performed 6 queries" , "nameisnull" , "~using default dictionary" )),
64+ ("-u <url> --technique=U --fresh-queries --force-partial --dump -T users --dump-format=HTML -- answers=\" crack=n\" -v 3" , ("performed 6 queries" , "nameisnull" , "~using default dictionary" , "dumped to HTML file " )),
6565 ("-u <url> --flush-session --all" , ("5 entries" , "Type: boolean-based blind" , "Type: time-based blind" , "Type: UNION query" , "luther" , "blisset" , "fluffy" , "179ad45c6ce2cb97cf1029e212046e81" , "NULL" , "nameisnull" , "testpass" )),
6666 ("-u <url> -z \" tec=B\" --hex --fresh-queries --threads=4 --sql-query=\" SELECT * FROM users\" " , ("SELECT * FROM users [5]" , "nameisnull" )),
6767 ("-u '<url>&echo=foobar*' --flush-session" , ("might be vulnerable to cross-site scripting" ,)),
6868 ("-u '<url>&query=*' --flush-session --technique=Q --banner" , ("Title: SQLite inline queries" , "banner: '3." )),
69- ("-d <direct> --flush-session --dump -T users --binary-fields=name --where \" id=3\" " , ("7775" , "179ad45c6ce2cb97cf1029e212046e81 (testpass)" ,)),
69+ ("-d <direct> --flush-session --dump -T users --dump-format=SQLITE -- binary-fields=name --where \" id=3\" " , ("7775" , "179ad45c6ce2cb97cf1029e212046e81 (testpass)" , "dumped to SQLITE database" )),
7070 ("-d <direct> --flush-session --banner --schema --sql-query=\" UPDATE users SET name='foobar' WHERE id=5; SELECT * FROM users; SELECT 987654321\" " , ("banner: '3." , "INTEGER" , "TEXT" , "id" , "name" , "surname" , "5, foobar, nameisnull" , "[*] 987654321" ,)),
7171 ("--purge -v 3" , ("~ERROR" , "~CRITICAL" , "deleting the whole directory tree" )),
7272 )
0 commit comments