Re: [sqlmap-users] Non-Detected SQLi

2013-06-10 Thread Sebastian Nerz
Hi Miroslav, Am 10.06.2013 12:22, schrieb Miroslav Stampar: > Hi Sebastian. > > There was indeed a bug [1]. Find it fixed now. And its working, thanks! > If you would like to contribute this payload we could include it into > sqlmap :) With pleasure! It should be working with (at least) MySQL,

Re: [sqlmap-users] Non-Detected SQLi

2013-06-10 Thread Miroslav Stampar
Hi Sebastian. There was indeed a bug [1]. Find it fixed now. If you would like to contribute this payload we could include it into sqlmap :) Kind regards, Miroslav Stampar [1] https://github.com/sqlmapproject/sqlmap/issues/462 On Mon, Jun 10, 2013 at 11:30 AM, Sebastian Nerz wrote: > Hi ther

[sqlmap-users] Non-Detected SQLi

2013-06-10 Thread Sebastian Nerz
Hi there, I wrote a small payload, to test for conditional error-based SQL-injection possibilities: AND boolean-error-based blind - WHERE or HAVING clause (MySQL) 1 1 1 1 1 REGEXP IF([INFERENCE],1,"") REGEXP IF