|
6 | 6 | <batch value="True"/> |
7 | 7 | <verbose value="1"/> |
8 | 8 | </global> |
9 | | - <case name="MySQL (--technique=B --is-dba --banner --current-user --current-db --dbs --tables -D testdb -T users --columns --dump --threads=4)"> |
| 9 | + <case name="MySQL boolean-based multi-threaded enumeration - all entries"> |
10 | 10 | <switches> |
11 | 11 | <url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/> |
12 | | - <isDba value="True"/> |
| 12 | + <threads value="4"/> |
13 | 13 | <tech value="B"/> |
| 14 | + <extensiveFp value="True"/> |
14 | 15 | <getBanner value="True"/> |
15 | 16 | <getCurrentUser value="True"/> |
16 | 17 | <getCurrentDb value="True"/> |
| 18 | + <getHostname value="True"/> |
| 19 | + <isDba value="True"/> |
| 20 | + <getUsers value="True"/> |
| 21 | + <getPasswordHashes value="True"/> |
| 22 | + <getPrivileges value="True"/> |
| 23 | + <getRoles value="True"/> |
17 | 24 | <getDbs value="True"/> |
18 | 25 | <getTables value="True"/> |
| 26 | + <getColumns value="True"/> |
| 27 | + <getCount value="True"/> |
| 28 | + <dumpTable value="True"/> |
19 | 29 | <db value="testdb"/> |
20 | 30 | <tbl value="users"/> |
| 31 | + <excludeSysDbs value="True"/> |
| 32 | + </switches> |
| 33 | + <parse> |
| 34 | + <item value="Title: AND boolean-based blind - WHERE or HAVING clause"/> |
| 35 | + <item value="r'back-end DBMS: active fingerprint: MySQL >= 5.1.12 and < 5.5.0'"/> |
| 36 | + <item value="banner: '5.1.63-0+squeeze1'"/> |
| 37 | + <item value="current user: 'root@localhost'"/> |
| 38 | + <item value="current database: 'testdb'"/> |
| 39 | + <item value="hostname: 'debian"/> |
| 40 | + <item value="current user is DBA: True"/> |
| 41 | + <item value="r'database management system users \[.+'debian-sys-maint'@'localhost'.+'root'@''"/> |
| 42 | + <item value="r'database management system users password hashes:.+root \[.+password hash: \*00E247AC5F9AF26AE0194B41E1E769DEE1429A29.+clear-text password: testpass'"/> |
| 43 | + <item value="r'database management system users privileges:.+%debian-sys-maint% \(administrator\).+%root% \(administrator\).+privilege: SUPER'"/> |
| 44 | + <item value="r'database management system users roles:.+%debian-sys-maint% \[.+%root% \[.+role: SUPER'"/> |
| 45 | + <item value="r'available databases \[.+information_schema.+mysql.+owasp10.+testdb'"/> |
| 46 | + <item value="r'Database: testdb.+1 table.+users'"/> |
| 47 | + <item value="r'Database: testdb.+Table: users.+3 columns.+surname.+varchar\(1000\)'"/> |
| 48 | + <item value="r'Database: testdb.+Table.+Entries.+users.+5'"/> |
| 49 | + <item value="r'Database: testdb.+Table: users.+5 entries.+luther.+nameisnull.+'"/> |
| 50 | + </parse> |
| 51 | + </case> |
| 52 | + |
| 53 | + |
| 54 | + <case name="MySQL error-based multi-threaded enumeration - all entries"> |
| 55 | + <switches> |
| 56 | + <url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/> |
| 57 | + <threads value="4"/> |
| 58 | + <tech value="E"/> |
| 59 | + <extensiveFp value="True"/> |
| 60 | + <getBanner value="True"/> |
| 61 | + <getCurrentUser value="True"/> |
| 62 | + <getCurrentDb value="True"/> |
| 63 | + <getHostname value="True"/> |
| 64 | + <isDba value="True"/> |
| 65 | + <getUsers value="True"/> |
| 66 | + <getPasswordHashes value="True"/> |
| 67 | + <getPrivileges value="True"/> |
| 68 | + <getRoles value="True"/> |
| 69 | + <getDbs value="True"/> |
| 70 | + <getTables value="True"/> |
21 | 71 | <getColumns value="True"/> |
| 72 | + <getCount value="True"/> |
22 | 73 | <dumpTable value="True"/> |
23 | | - <threads value="4"/> |
| 74 | + <db value="testdb"/> |
| 75 | + <tbl value="users"/> |
| 76 | + <excludeSysDbs value="True"/> |
24 | 77 | </switches> |
25 | 78 | <parse> |
26 | | - <item value="current user is DBA: True"/> |
| 79 | + <item value="Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause"/> |
| 80 | + <item value="r'back-end DBMS: active fingerprint: MySQL >= 5.1.12 and < 5.5.0'"/> |
27 | 81 | <item value="banner: '5.1.63-0+squeeze1'"/> |
28 | 82 | <item value="current user: 'root@localhost'"/> |
29 | 83 | <item value="current database: 'testdb'"/> |
30 | | - <item value="r'information_schema.+mysql.+owasp10.+testdb'"/> |
31 | | - <item value="r'1 table.+users'"/> |
32 | | - <item value="r'3 columns.+surname.+varchar\(1000\)'"/> |
33 | | - <item value="r'5 entries.+nameisnull.+'"/> |
| 84 | + <item value="hostname: 'debian"/> |
| 85 | + <item value="current user is DBA: True"/> |
| 86 | + <item value="r'database management system users \[.+'debian-sys-maint'@'localhost'.+'root'@''"/> |
| 87 | + <item value="r'database management system users password hashes:.+root \[.+password hash: \*00E247AC5F9AF26AE0194B41E1E769DEE1429A29.+clear-text password: testpass'"/> |
| 88 | + <item value="r'database management system users privileges:.+%debian-sys-maint% \(administrator\).+%root% \(administrator\).+privilege: SUPER'"/> |
| 89 | + <item value="r'database management system users roles:.+%debian-sys-maint% \[.+%root% \[.+role: SUPER'"/> |
| 90 | + <item value="r'available databases \[.+information_schema.+mysql.+owasp10.+testdb'"/> |
| 91 | + <item value="r'Database: testdb.+1 table.+users'"/> |
| 92 | + <item value="r'Database: testdb.+Table: users.+3 columns.+surname.+varchar\(1000\)'"/> |
| 93 | + <item value="r'Database: testdb.+Table.+Entries.+users.+5'"/> |
| 94 | + <item value="r'Database: testdb.+Table: users.+5 entries.+luther.+nameisnull.+'"/> |
34 | 95 | </parse> |
35 | 96 | </case> |
| 97 | + |
| 98 | + <!-- Old test cases --> |
36 | 99 | <case name="MySQL (--technique=E --is-dba --banner --current-user --current-db --dbs --tables -D testdb -T users --columns --dump)"> |
37 | 100 | <switches> |
38 | 101 | <url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/> |
|
0 commit comments