mirror of
https://github.com/sqlmapproject/sqlmap
synced 2026-01-01 05:12:26 +01:00
29 lines
1.6 KiB
XML
29 lines
1.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<root>
|
|
<case tag="custom" desc="custom">
|
|
<positive format="%s%s%s AND %s%d=%d %s" params="value, prefix, ")" * parenthesis, "(" * parenthesis, randInt, randInt, postfix"/>
|
|
<negative format="%s%s%s AND %s%d=%d %s" params="value, prefix, ")" * parenthesis, "(" * parenthesis, randInt, randInt + 1, postfix"/>
|
|
</case>
|
|
<case tag="numeric" desc="unescaped numeric">
|
|
<positive format="%s%s AND %s%d=%d" params="value, ")" * parenthesis, "(" * parenthesis, randInt, randInt"/>
|
|
<negative format="%s%s AND %s%d=%d" params="value, ")" * parenthesis, "(" * parenthesis, randInt, randInt + 1"/>
|
|
</case>
|
|
<case tag="stringsingle" desc="single quoted string">
|
|
<positive format="%s'%s AND %s'%s'='%s" params="value, ")" * parenthesis, "(" * parenthesis, randStr, randStr"/>
|
|
<negative format="%s'%s AND %s'%s'='%s" params="value, ")" * parenthesis, "(" * parenthesis, randStr, randStr + randomStr(1)"/>
|
|
</case>
|
|
<case tag="likesingle" desc="LIKE single quoted string">
|
|
<positive format="%s'%s AND %s'%s' LIKE '%s" params="value, ")" * parenthesis, "(" * parenthesis, randStr, randStr"/>
|
|
<negative format="" params=""/>
|
|
</case>
|
|
<case tag="custom" desc="custom">
|
|
<positive format="" params=""/>
|
|
<negative format="" params=""/>
|
|
</case>
|
|
<case tag="custom" desc="custom">
|
|
<positive format="" params=""/>
|
|
<negative format="" params=""/>
|
|
</case>
|
|
|
|
</root>
|