Report

[jsql-robot]

What's the expected behavior?

Type: time-based blind
Title: Microsoft SQL Server/Sybase time-based blind (IF)
Payload: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36HL87Scrb'); WAITFOR DELAY '0:0:5'-- UZWu

What's the actual behavior?

removal User-Agent like this
User-Agent: 5343553445'or'a'!='b'-- -OZ7C
or full removal User-Agent or
java.lang.IllegalArgumentException: invalid header value: "Mozilla/5.0(Windows NT 10.0;Win64;x64)AppleWebKit/537.36(KHTML,like Gecko)Chrome/126.0.0.0 Safari/537.36or 1=convert(int,((select'SqLi'+substring(coalesce((convert(varchar,(133707330+1))),''),1,65536)+'����')))-- -XpS2"
and No injection found

Steps to reproduce the problem

set Header like User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36*