diff --git a/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.7-Testing_for_ORM_Injection.md b/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.7-Testing_for_ORM_Injection.md index 4706a5e..aea9966 100644 --- a/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.7-Testing_for_ORM_Injection.md +++ b/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.7-Testing_for_ORM_Injection.md @@ -54,7 +54,8 @@ Based on their [blog article](https://blog.ripstech.com/2020/exploiting-hibernat | DBMS | SQL Injection | |------------|-----------------------------------------------------------------------| | MySQL | `abc\' INTO OUTFILE --` | -| PostgreSQL | `$$='$$=chr(61) \|\| chr(0x27) and 1=pg_sleep(2) \|\| version()'` | + +| PostgreSQL | `$$='$$=chr(61) || chr(0x27) and 1=pg_sleep(2) || version()'` | | Oracle | `NVL(TO_CHAR(DBMS_XMLGEN.getxml('select 1 where 1337>1')),'1')!='1'` | | MS SQL | `1