Skip to content

Commit edeb181

Browse files
bdamelebdamele
committedJan 18, 2013
added first bunch of test cases for Firebird, issue #312
·
1.9.40.19
1 parent d1acdee commit edeb181

File tree

1 file changed

+213
-0
lines changed

1 file changed

+213
-0
lines changed
 

Diff for: ‎xml/livetests.xml

+213
Original file line numberDiff line numberDiff line change
@@ -888,6 +888,219 @@
888888
<item value="r'Database: SQLite_masterdb.+Table: users.+5 entries.+luther.+nameisnull.+'"/>
889889
</parse>
890890
</case>
891+
<case name="Firebird boolean-based multi-threaded enumeration - all entries">
892+
<switches>
893+
<url value="http://debiandev/sqlmap/firebird/get_int.php?id=1"/>
894+
<threads value="4"/>
895+
<tech value="B"/>
896+
<extensiveFp value="True"/>
897+
<getBanner value="True"/>
898+
<getCurrentUser value="True"/>
899+
<getCurrentDb value="True"/>
900+
<getHostname value="True"/>
901+
<isDba value="True"/>
902+
<getUsers value="True"/>
903+
<getPasswordHashes value="True"/>
904+
<getPrivileges value="True"/>
905+
<getRoles value="True"/>
906+
<getDbs value="True"/>
907+
<getTables value="True"/>
908+
<getColumns value="True"/>
909+
<getCount value="True"/>
910+
<dumpTable value="True"/>
911+
<tbl value="users"/>
912+
<excludeSysDbs value="True"/>
913+
</switches>
914+
<parse>
915+
<item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
916+
<item value="r'back-end DBMS: active fingerprint: Firebird 2.1 (dialect 3)'"/>
917+
<item value="banner: '2.5.0'"/>
918+
<item value="current user: 'SYSDBA'"/>
919+
<item value="current database: '/'"/>
920+
<item value="hostname: None"/>
921+
<item value="current user is DBA: True"/>
922+
<item value="r'database management system users \[.+PUBLIC.+SYSDBA'"/>
923+
<item value="r'database management system users privileges:.+PUBLIC.+privilege: SELECT.+SYSDBA.+privilege: DELETE.+privilege: UPDATE'"/>
924+
<item value="r'database management system users roles:.+PUBLIC.+role: SELECT.+SYSDBA.+role: DELETE.+role: UPDATE'"/>
925+
<item value="r'Database: Firebird_masterdb.+1 table.+USERS'"/>
926+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+3 columns.+SURNAME.+VARCHAR'"/>
927+
<item value="r'Database: Firebird_masterdb.+Table.+Entries.+USERS.+5'"/>
928+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
929+
</parse>
930+
</case>
931+
<!-- TODO: this test case fails because of issue #358 -->
932+
<case name="Firebird error-based multi-threaded enumeration - all entries">
933+
<switches>
934+
<url value="http://debiandev/sqlmap/firebird/get_int.php?id=1"/>
935+
<threads value="4"/>
936+
<tech value="E"/>
937+
<extensiveFp value="True"/>
938+
<getBanner value="True"/>
939+
<getCurrentUser value="True"/>
940+
<getCurrentDb value="True"/>
941+
<getHostname value="True"/>
942+
<isDba value="True"/>
943+
<getUsers value="True"/>
944+
<getPasswordHashes value="True"/>
945+
<getPrivileges value="True"/>
946+
<getRoles value="True"/>
947+
<getDbs value="True"/>
948+
<getTables value="True"/>
949+
<getColumns value="True"/>
950+
<getCount value="True"/>
951+
<dumpTable value="True"/>
952+
<tbl value="users"/>
953+
</switches>
954+
<parse>
955+
<item value="Title: AND boolean-based blind - WHERE or HAVING clause"/>
956+
<item value="r'back-end DBMS: active fingerprint: Firebird 2.1 (dialect 3)'"/>
957+
<item value="banner: '2.5.0'"/>
958+
<item value="current user: 'SYSDBA'"/>
959+
<item value="current database: '/'"/>
960+
<item value="hostname: None"/>
961+
<item value="current user is DBA: True"/>
962+
<item value="r'database management system users \[.+PUBLIC.+SYSDBA'"/>
963+
<item value="r'database management system users privileges:.+PUBLIC.+privilege: SELECT.+SYSDBA.+privilege: DELETE.+privilege: UPDATE'"/>
964+
<item value="r'database management system users roles:.+PUBLIC.+role: SELECT.+SYSDBA.+role: DELETE.+role: UPDATE'"/>
965+
<item value="r'Database: Firebird_masterdb.+1 table.+USERS'"/>
966+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+3 columns.+SURNAME.+VARCHAR'"/>
967+
<item value="r'Database: Firebird_masterdb.+Table.+Entries.+USERS.+5'"/>
968+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
969+
</parse>
970+
</case>
971+
<case name="Firebird UNION query multi-threaded enumeration - all entries">
972+
<switches>
973+
<url value="http://debiandev/sqlmap/firebird/get_int.php?id=1"/>
974+
<threads value="4"/>
975+
<tech value="U"/>
976+
<extensiveFp value="True"/>
977+
<getBanner value="True"/>
978+
<getCurrentUser value="True"/>
979+
<getCurrentDb value="True"/>
980+
<getHostname value="True"/>
981+
<isDba value="True"/>
982+
<getUsers value="True"/>
983+
<getPasswordHashes value="True"/>
984+
<getPrivileges value="True"/>
985+
<getRoles value="True"/>
986+
<getDbs value="True"/>
987+
<getTables value="True"/>
988+
<getColumns value="True"/>
989+
<getCount value="True"/>
990+
<dumpTable value="True"/>
991+
<tbl value="users"/>
992+
</switches>
993+
<parse>
994+
<item value="Title: Generic UNION query (NULL) - 3 columns"/>
995+
<item value="r'back-end DBMS: active fingerprint: Firebird 2.1 (dialect 3)'"/>
996+
<item value="banner: '2.5.0'"/>
997+
<item value="current user: 'SYSDBA'"/>
998+
<item value="current database: '/'"/>
999+
<item value="hostname: None"/>
1000+
<item value="current user is DBA: True"/>
1001+
<item value="r'database management system users \[.+PUBLIC.+SYSDBA'"/>
1002+
<item value="r'database management system users privileges:.+PUBLIC.+privilege: SELECT.+SYSDBA.+privilege: DELETE.+privilege: UPDATE'"/>
1003+
<item value="r'database management system users roles:.+PUBLIC.+role: SELECT.+SYSDBA.+role: DELETE.+role: UPDATE'"/>
1004+
<item value="r'Database: Firebird_masterdb.+1 table.+USERS'"/>
1005+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+3 columns.+SURNAME.+VARCHAR'"/>
1006+
<item value="r'Database: Firebird_masterdb.+Table.+Entries.+USERS.+5'"/>
1007+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
1008+
</parse>
1009+
</case>
1010+
<case name="Firebird partial UNION query multi-threaded enumeration - all entries">
1011+
<switches>
1012+
<url value="http://debiandev/sqlmap/firebird/get_int_partialunion.php?id=1"/>
1013+
<threads value="4"/>
1014+
<tech value="U"/>
1015+
<extensiveFp value="True"/>
1016+
<getBanner value="True"/>
1017+
<getCurrentUser value="True"/>
1018+
<getCurrentDb value="True"/>
1019+
<getHostname value="True"/>
1020+
<isDba value="True"/>
1021+
<getUsers value="True"/>
1022+
<getPasswordHashes value="True"/>
1023+
<getPrivileges value="True"/>
1024+
<getRoles value="True"/>
1025+
<getDbs value="True"/>
1026+
<getTables value="True"/>
1027+
<getColumns value="True"/>
1028+
<getCount value="True"/>
1029+
<dumpTable value="True"/>
1030+
<tbl value="users"/>
1031+
</switches>
1032+
<parse>
1033+
<item value="Title: Generic UNION query (NULL) - 3 columns"/>
1034+
<item value="r'back-end DBMS: active fingerprint: Firebird 2.1 (dialect 3)'"/>
1035+
<item value="banner: '2.5.0'"/>
1036+
<item value="current user: 'SYSDBA'"/>
1037+
<item value="current database: '/'"/>
1038+
<item value="hostname: None"/>
1039+
<item value="current user is DBA: True"/>
1040+
<item value="r'database management system users \[.+PUBLIC.+SYSDBA'"/>
1041+
<item value="r'database management system users privileges:.+PUBLIC.+privilege: SELECT.+SYSDBA.+privilege: DELETE.+privilege: UPDATE'"/>
1042+
<item value="r'database management system users roles:.+PUBLIC.+role: SELECT.+SYSDBA.+role: DELETE.+role: UPDATE'"/>
1043+
<item value="r'Database: Firebird_masterdb.+1 table.+USERS'"/>
1044+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+3 columns.+SURNAME.+VARCHAR'"/>
1045+
<item value="r'Database: Firebird_masterdb.+Table.+Entries.+USERS.+5'"/>
1046+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
1047+
</parse>
1048+
</case>
1049+
<case name="Firebird time-based single-threaded enumeration - all entries">
1050+
<switches>
1051+
<url value="http://debiandev/sqlmap/firebird/get_int_nooutput.php?id=1"/>
1052+
<tech value="T"/>
1053+
<level value="4"/>
1054+
<risk value="2"/>
1055+
<timeSec value="2"/>
1056+
<getBanner value="True"/>
1057+
<isDba value="True"/>
1058+
</switches>
1059+
<parse>
1060+
<item value="Title: Firebird AND time-based blind \(heavy query\)"/>
1061+
<item value="banner: '2.5.0'"/>
1062+
<item value="current user is DBA: True"/>
1063+
</parse>
1064+
</case>
1065+
<case name="Firebird inline queries multi-threaded enumeration - all entries">
1066+
<switches>
1067+
<url value="http://debiandev/sqlmap/firebird/get_int_inline.php?id=1"/>
1068+
<threads value="4"/>
1069+
<tech value="Q"/>
1070+
<extensiveFp value="True"/>
1071+
<getBanner value="True"/>
1072+
<getCurrentUser value="True"/>
1073+
<getCurrentDb value="True"/>
1074+
<getHostname value="True"/>
1075+
<isDba value="True"/>
1076+
<getUsers value="True"/>
1077+
<getPasswordHashes value="True"/>
1078+
<getPrivileges value="True"/>
1079+
<getRoles value="True"/>
1080+
<getDbs value="True"/>
1081+
<getTables value="True"/>
1082+
<getColumns value="True"/>
1083+
<getCount value="True"/>
1084+
<dumpTable value="True"/>
1085+
<tbl value="users"/>
1086+
</switches>
1087+
<parse>
1088+
<item value="Title: Firebird inline queries"/>
1089+
<item value="r'back-end DBMS: active fingerprint: Firebird 2.1 (dialect 3)'"/>
1090+
<item value="banner: '2.5.0'"/>
1091+
<item value="current user: 'SYSDBA'"/>
1092+
<item value="current database: '/'"/>
1093+
<item value="hostname: None"/>
1094+
<item value="current user is DBA: True"/>
1095+
<item value="r'database management system users \[.+PUBLIC.+SYSDBA'"/>
1096+
<item value="r'database management system users privileges:.+PUBLIC.+privilege: SELECT.+SYSDBA.+privilege: DELETE.+privilege: UPDATE'"/>
1097+
<item value="r'database management system users roles:.+PUBLIC.+role: SELECT.+SYSDBA.+role: DELETE.+role: UPDATE'"/>
1098+
<item value="r'Database: Firebird_masterdb.+1 table.+USERS'"/>
1099+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+3 columns.+SURNAME.+VARCHAR'"/>
1100+
<item value="r'Database: Firebird_masterdb.+Table.+Entries.+USERS.+5'"/>
1101+
<item value="r'Database: Firebird_masterdb.+Table: USERS.+5 entries.+luther.+nameisnull.+'"/>
1102+
</parse>
1103+
</case>
8911104
<!-- End of common enumeration switches across all techniques -->
8921105

8931106
<!-- Custom enumeration switches -->

0 commit comments

Comments
 (0)
Please sign in to comment.