---
meta:
  author: "Christian S.J. Peron and Allan Boll"
  description: None
  enabled: true
  name: 942130.yaml
tests:
  - test_title: 942130-1
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            data: "var=%221%22%20sSOUNDS%20LIKE%20%22SOUNDS%20LIKE%201&other_var=test"
            version: HTTP/1.0
          output:
            no_log_contains: id "942130"
  - test_title: 942130-2
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=1=1"
            version: HTTP/1.1
          output:
            log_contains: id "942130"
  - test_title: 942130-3
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=11=1"
            version: HTTP/1.1
          output:
            no_log_contains: id "942130"
  - test_title: 942130-4
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=1=11"
            version: HTTP/1.1
          output:
            no_log_contains: id "942130"
  - test_title: 942130-5
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=11!=1"
            version: HTTP/1.1
          output:
            log_contains: id "942130"
  - test_title: 942130-6
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=1!=11"
            version: HTTP/1.1
          output:
            log_contains: id "942130"
  - test_title: 942130-7
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=11!=11"
            version: HTTP/1.1
          output:
            no_log_contains: id "942130"
  - test_title: 942130-8
    desc: "SQL Injection Attack: SQL Tautology"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: GET
            uri: "/?a=b,1=1"
            version: HTTP/1.1
          output:
            log_contains: id "942130"
