@@ -44,7 +44,7 @@ def vulnTest():
4444 ("-u <url> --data='code=1' --code=200 --technique=B --banner --no-cast --flush-session" , ("back-end DBMS: SQLite" , "banner: '3." , "~COALESCE(CAST(" )),
4545 (u"-c <config> --flush-session --output-dir=\" <tmpdir>\" --smart --roles --statements --hostname --privileges --sql-query=\" SELECT '\u0161 u\u0107 uraj'\" --technique=U" , (u": '\u0161 u\u0107 uraj'" , "on SQLite it is not possible" , "as the output directory" )),
4646 (u"-u <url> --flush-session --sql-query=\" SELECT '\u0161 u\u0107 uraj'\" --technique=B --no-escape --string=luther --unstable" , (u": '\u0161 u\u0107 uraj'" ,)),
47- ("-m <multiple> --flush-session --technique=B --banner" , ("URL 3 :" , "back-end DBMS: SQLite" , "banner: '3." )),
47+ ("-m <multiple> --flush-session --technique=B --banner" , ("/3] URL :" , "back-end DBMS: SQLite" , "banner: '3." )),
4848 ("--dummy" , ("all tested parameters do not appear to be injectable" , "does not seem to be injectable" , "there is not at least one" , "~might be injectable" )),
4949 ("-u '<url>&id2=1' -p id2 -v 5 --flush-session --level=5 --text-only --test-filter='AND boolean-based blind - WHERE or HAVING clause (MySQL comment)'" , ("~1AND" ,)),
5050 ("--list-tampers" , ("between" , "MySQL" , "xforwardedfor" )),
@@ -74,7 +74,7 @@ def vulnTest():
7474 ("-u '<url>&echo=foobar*' --flush-session" , ("might be vulnerable to cross-site scripting" ,)),
7575 ("-u '<url>&query=*' --flush-session --technique=Q --banner" , ("Title: SQLite inline queries" , "banner: '3." )),
7676 ("-d <direct> --flush-session --dump -T users --dump-format=SQLITE --binary-fields=name --where \" id=3\" " , ("7775" , "179ad45c6ce2cb97cf1029e212046e81 (testpass)" , "dumped to SQLITE database" )),
77- ("-d <direct> --flush-session --banner --schema --sql-query=\" UPDATE users SET name='foobar' WHERE id=5; SELECT * FROM users; SELECT 987654321\" " , ("banner: '3." , "INTEGER" , "TEXT" , "id" , "name" , "surname" , "5, foobar, nameisnull" , "[*] 987654321" ,)),
77+ ("-d <direct> --flush-session --banner --schema --sql-query=\" UPDATE users SET name='foobar' WHERE id=5; SELECT * FROM users; SELECT 987654321\" " , ("banner: '3." , "INTEGER" , "TEXT" , "id" , "name" , "surname" , "5, foobar, nameisnull" , "' 987654321' " ,)),
7878 ("--purge -v 3" , ("~ERROR" , "~CRITICAL" , "deleting the whole directory tree" )),
7979 )
8080
0 commit comments