---
meta:
  author: "Christoph Hansen"
  description: None
  enabled: true
  name: 942410.yaml
tests:
  - test_title: 942410-1
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "ABS("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-2
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "benchmark("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-3
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "BENChmARk("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-4
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "cast("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-5
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "CAST("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-6
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "char("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-7
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "chaR("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-8
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "chr("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-9
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "CHR("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-10
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "COALESCE("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-11
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "Compress ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-12
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "concat ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-13
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "cOnCaT("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-14
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "concat_ws("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-15
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "convert("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-16
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "cOnVeRt("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-17
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "COS("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-18
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "COUNT("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-19
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "CURRENT_USER("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-20
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "database ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-21
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "date("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-22
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=date%5D%3D%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-23
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=day.+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-24
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=day%26%27%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-25
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=decode%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-26
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=default%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-27
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=ELT%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-28
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=encode%3D%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-29
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=ExtractValue%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-30
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=EXTRACTVALUE%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-31
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=floor%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-32
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=FLOOR+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-33
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=format%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-34
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=GROUP_CONCAT%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-35
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=hex%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-36
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=hEx%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-37
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=if+%21%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-38
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=if+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-39
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=if%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-40
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=if%5C%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-41
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=IFNULL%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-42
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=in+%27%24%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-43
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=IN+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-44
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=IN%2F%2A%2A%2F%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-45
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=insert%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-46
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=left%27%29%3F%24%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-47
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=LEFT%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-48
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=length%7C%7C%21%21%24%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-49
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=length%7C%7C%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-50
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=length%3F%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-51
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=length%26%26%21%21%21%24%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-52
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=length%26%26%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-53
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=LENGTH%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-54
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=ln+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-55
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=ln%29+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-56
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=load_file%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-57
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=local%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-58
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=log%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-59
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=log%26%26%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-60
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=lower%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-61
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=MAKE_SET%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-62
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=MAX%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-63
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=md5%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-64
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=md5%5C%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-65
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=MID%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-66
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=minute+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-67
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=month%3D%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-68
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "name_const("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-69
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "now("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-70
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "nOW("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-71
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "ord("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-72
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "password?("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-73
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "password/?("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-74
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "Password>$("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-75
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pg_sleep("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-76
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pi("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-77
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "PI("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-78
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pow("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-79
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "POW("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-80
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "quarter. ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-81
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "rand("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-82
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "Rand ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-83
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "RAND("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-84
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "replace("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-85
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "REPLACE("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-86
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "round ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-87
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "round("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-88
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "rtrim("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-89
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "RTRIM("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-90
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=sin ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-91
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "SIN("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-92
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=sleep("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-93
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "SLEEP   ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-94
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=strcmp("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-95
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=substr("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-96
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "SUBSTR("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-97
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=substring("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-98
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "SUBSTRING("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-99
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=sysdate("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-100
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "time ("
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-101
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=time%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-102
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=trim%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-103
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=Uncompress+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-104
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=unhex%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-105
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=uNhEx%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-106
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=updatexml%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-107
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=UpdateXML%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-108
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=UPPER%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-109
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=user+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-110
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=user%2F%3F%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-111
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=user%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-112
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=values+%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-113
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=VALUES%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-114
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=version%3D%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-115
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=version%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-116
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=xmltype%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-117
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=XMLType%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
  - test_title: 942410-118
    desc: "SQL Injection Attack"
    stages:
      - stage:
          input:
            dest_addr: 127.0.0.1
            headers:
              Host: localhost
            method: POST
            port: 80
            uri: "/"
            data: "pay=year%5D%3D%28"
            version: HTTP/1.0
          output:
            log_contains: id "942410"
