Skip to content

feat(db2): add light time-based payloads#6069

Open
Giardi77 wants to merge 1 commit into
sqlmapproject:masterfrom
Giardi77:db2-light-time-payload
Open

feat(db2): add light time-based payloads#6069
Giardi77 wants to merge 1 commit into
sqlmapproject:masterfrom
Giardi77:db2-light-time-payload

Conversation

@Giardi77
Copy link
Copy Markdown

@Giardi77 Giardi77 commented Jun 5, 2026

Adds lower-impact IBM DB2 time-based blind payloads that use a two-way SYSIBM.SYSTABLES Cartesian product before the existing three-way heavy-query payloads.

This preserves the existing heavier DB2 payloads as fallbacks while giving sqlmap a cheaper first timing probe for DB2 targets where the current payload can be too disruptive.

Also extends the payload loader doctest to assert that the DB2 light payloads are loaded and do not use the T3 alias.

Verification:

  • python3 -c "from xml.etree import ElementTree as et; et.parse('data/xml/payloads/time_blind.xml'); print('xml ok')"
  • python3 sqlmap.py --smoke

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant