Time based payload sleep times inconsistent about ghauri HOT 2 CLOSED

@conditi0ns the set value time-sec switch works when the injection is confirmed and we are in phase of extraction after confirming the SQLi, In testing phase ghauri doesn't consider time-sec value.

from ghauri.

This seems to be from tests.py where if on a good internet connection it will select a random value between 5 and 9. I'm guessing this is for WAF evasion.

Otherwise if the connection is poor it will set the value to 10 and increment by 1 until it stabilizes.

This would explain the behavior I'm seeing now so I'll close this one out.

# in case of very slow internet users we will consider timesec value for testing and it should be >= 10 otherwise with good internet we are good to consider random sleep value
    sleep_time = timesec if timesec >= 10 else random.randint(5, 9)

from ghauri.