Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit f8267ec

Browse files
bdamelebdamele
committed
added more specific --search -T and -C test cases
1 parent 61a838b commit f8267ec

1 file changed

Lines changed: 90 additions & 6 deletions

File tree

‎xml/livetests.xml‎

Lines changed: 90 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -359,7 +359,7 @@
359359
<item value="r'found databases.+:.+\[\*\] information_schema.+\[\*\] testdb'"/>
360360
</parse>
361361
</case>
362-
<case name="MySQL boolean-based multi-threaded search enumeration - tables">
362+
<case name="MySQL boolean-based multi-threaded search enumeration - tables given database">
363363
<switches>
364364
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
365365
<threads value="4"/>
@@ -373,7 +373,7 @@
373373
<item value="r'.+5 entries.+wu.+nameisnull'"/>
374374
</parse>
375375
</case>
376-
<case name="MySQL error-based multi-threaded search enumeration - tables">
376+
<case name="MySQL error-based multi-threaded search enumeration - tables given database">
377377
<switches>
378378
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
379379
<threads value="4"/>
@@ -387,7 +387,7 @@
387387
<item value="r'.+5 entries.+wu.+nameisnull'"/>
388388
</parse>
389389
</case>
390-
<case name="MySQL UNION query multi-threaded search enumeration - tables">
390+
<case name="MySQL UNION query multi-threaded search enumeration - tables given database">
391391
<switches>
392392
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
393393
<threads value="4"/>
@@ -401,7 +401,46 @@
401401
<item value="r'.+5 entries.+wu.+nameisnull'"/>
402402
</parse>
403403
</case>
404-
<case name="MySQL boolean-based multi-threaded search enumeration - columns">
404+
<case name="MySQL boolean-based multi-threaded search enumeration - tables without given database">
405+
<switches>
406+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
407+
<threads value="4"/>
408+
<tech value="B"/>
409+
<search value="True"/>
410+
<tbl value="user"/>
411+
<answers value="do you want to dump=N"/>
412+
</switches>
413+
<parse>
414+
<item value="r'Database: testdb.+1 table.+users.+Database: mysql.+1 table.+user '"/>
415+
</parse>
416+
</case>
417+
<case name="MySQL error-based multi-threaded search enumeration - tables without given database">
418+
<switches>
419+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
420+
<threads value="4"/>
421+
<tech value="E"/>
422+
<search value="True"/>
423+
<tbl value="user"/>
424+
<answers value="do you want to dump=N"/>
425+
</switches>
426+
<parse>
427+
<item value="r'Database: testdb.+1 table.+users.+Database: mysql.+1 table.+user '"/>
428+
</parse>
429+
</case>
430+
<case name="MySQL UNION query multi-threaded search enumeration - tables without given database">
431+
<switches>
432+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
433+
<threads value="4"/>
434+
<tech value="U"/>
435+
<search value="True"/>
436+
<tbl value="user"/>
437+
<answers value="do you want to dump=N"/>
438+
</switches>
439+
<parse>
440+
<item value="r'Database: testdb.+1 table.+users.+Database: mysql.+1 table.+user '"/>
441+
</parse>
442+
</case>
443+
<case name="MySQL boolean-based multi-threaded search enumeration - column without given db or table">
405444
<switches>
406445
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
407446
<threads value="4"/>
@@ -415,7 +454,7 @@
415454
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+surname'"/>
416455
</parse>
417456
</case>
418-
<case name="MySQL error-based multi-threaded search enumeration - columns">
457+
<case name="MySQL error-based multi-threaded search enumeration - column without given db or table">
419458
<switches>
420459
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
421460
<threads value="4"/>
@@ -429,7 +468,7 @@
429468
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+varchar\(500\).+surname.+varchar\(1000\)'"/>
430469
</parse>
431470
</case>
432-
<case name="MySQL UNION query multi-threaded search enumeration - columns">
471+
<case name="MySQL UNION query multi-threaded search enumeration - column without given db or table">
433472
<switches>
434473
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
435474
<threads value="4"/>
@@ -443,6 +482,51 @@
443482
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+varchar\(500\).+surname.+varchar\(1000\)'"/>
444483
</parse>
445484
</case>
485+
<case name="MySQL boolean-based multi-threaded search enumeration - column given databases">
486+
<switches>
487+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
488+
<threads value="4"/>
489+
<tech value="B"/>
490+
<search value="True"/>
491+
<db value="mysql,testdb"/>
492+
<col value="name"/>
493+
<answers value="do you want to dump=N"/>
494+
</switches>
495+
<parse>
496+
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+surname'"/>
497+
<item value="r'Database: mysql.+Table: plugin.+1 column.+name'"/>
498+
</parse>
499+
</case>
500+
<case name="MySQL error-based multi-threaded search enumeration - column given databases">
501+
<switches>
502+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
503+
<threads value="4"/>
504+
<tech value="E"/>
505+
<search value="True"/>
506+
<db value="mysql,testdb"/>
507+
<col value="name"/>
508+
<answers value="do you want to dump=N"/>
509+
</switches>
510+
<parse>
511+
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+varchar\(500\).+surname.+varchar\(1000\)'"/>
512+
<item value="r'Database: mysql.+Table: plugin.+1 column.+name.+char\(64\)'"/>
513+
</parse>
514+
</case>
515+
<case name="MySQL UNION query multi-threaded search enumeration - column given databases">
516+
<switches>
517+
<url value="http://debiandev/sqlmap/mysql/get_int.php?id=1"/>
518+
<threads value="4"/>
519+
<tech value="U"/>
520+
<search value="True"/>
521+
<db value="mysql,testdb"/>
522+
<col value="name"/>
523+
<answers value="do you want to dump=N"/>
524+
</switches>
525+
<parse>
526+
<item value="r'Database: testdb.+Table: users.+2 columns.+name.+varchar\(500\).+surname.+varchar\(1000\)'"/>
527+
<item value="r'Database: mysql.+Table: plugin.+1 column.+name.+char\(64\)'"/>
528+
</parse>
529+
</case>
446530
<!-- End of search enumeration switches -->
447531

448532

0 commit comments

Comments
 (0)