---
meta:
  author: "Christoph Hansen"
  description: None
  enabled: true
  name: 942361.yaml
tests:
  - test_title: 942361-1
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "'alter a"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-2
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "\" ALTER A"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-3
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "'ALTER A"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-4
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "' alter/"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-5
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "\" UNION A"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-6
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "'UNION A"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
  - test_title: 942361-7
    desc: "Detects basic SQL injection based on keyword alter or union"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "' union/"
            version: HTTP/1.0
          output:
            log_contains: id "942361"
