Package com.jsql.model.accessible.engine

Class ExploitMysql

java.lang.Object

com.jsql.model.accessible.engine.ExploitMysql

public class ExploitMysql
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	NAME_TABLE

Constructor Summary

Constructors

Constructor	Description
ExploitMysql(InjectionModel injectionModel)

Method Summary

Modifier and Type	Method	Description
String	byNetshare(int nbIndexesPrefix, String pathNetshareFolder, String nameExploit, String pathRemoteFolder, BiPredicate<String,String> biPredConfirm)
String	byQueryBody(int nbIndexesPrefix, String pathRemoteFolder, String nameExploit, List<String> hexChunks, BiPredicate<String,String> biPredConfirm)
void	byTable(List<String> bodyHexChunks, String pathRemoteFile)
String	confirm(String path)
String	create(String pathRemoteFolder, String urlExploit, String keyPropertyExploit, String nameExploit, BinaryOperator<String> biFuncGetRequest, String pathNetshareFolder, ExploitMode exploitMode)	Create shell on remote server
String	createSql(String pathExploit, String urlExploit, String pathNetshare, ExploitMode exploitMode, String username, String password)
void	createUdf(String pathNetshareFolder, ExploitMode exploitMode)
void	createUpload(String pathExploit, String urlExploit, String pathNetshare, ExploitMode exploitMode, File fileToUpload)
String	createWeb(String pathExploit, String urlExploit, String pathNetshare, ExploitMode exploitMode)
ModelYamlMysql	getModelYaml()
String	getRead(String pathFile)
String	runRceCmd(String command, UUID uuidShell)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

NAME_TABLE

public static final String NAME_TABLE

See Also:

• Constant Field Values

Constructor Details

ExploitMysql

public ExploitMysql(InjectionModel injectionModel)

Method Details

createWeb

public String createWeb(String pathExploit,
 String urlExploit,
 String pathNetshare,
 ExploitMode exploitMode)
                 throws JSqlException

Throws:

JSqlException

createSql

public String createSql(String pathExploit,
 String urlExploit,
 String pathNetshare,
 ExploitMode exploitMode,
 String username,
 String password)
                 throws JSqlException

Throws:

JSqlException

createUpload

public void createUpload(String pathExploit,
 String urlExploit,
 String pathNetshare,
 ExploitMode exploitMode,
 File fileToUpload)
                  throws JSqlException

Throws:

JSqlException

create

public String create(String pathRemoteFolder,
 String urlExploit,
 String keyPropertyExploit,
 String nameExploit,
 BinaryOperator<String> biFuncGetRequest,
 String pathNetshareFolder,
 ExploitMode exploitMode)
              throws JSqlException

Create shell on remote server

Parameters:

urlExploit - URL for the script (used for url rewriting)

Throws:

JSqlException

createUdf

public void createUdf(String pathNetshareFolder,
 ExploitMode exploitMode)
               throws JSqlException

Throws:

JSqlException

byQueryBody

public String byQueryBody(int nbIndexesPrefix,
 String pathRemoteFolder,
 String nameExploit,
 List<String> hexChunks,
 BiPredicate<String,String> biPredConfirm)

byNetshare

public String byNetshare(int nbIndexesPrefix,
 String pathNetshareFolder,
 String nameExploit,
 String pathRemoteFolder,
 BiPredicate<String,String> biPredConfirm)

byTable

public void byTable(List<String> bodyHexChunks,
 String pathRemoteFile)
             throws JSqlException

Throws:

JSqlException

confirm

public String confirm(String path)
               throws JSqlException

Throws:

JSqlException

runRceCmd

public String runRceCmd(String command,
 UUID uuidShell)

getRead

public String getRead(String pathFile)
               throws AbstractSlidingException

Throws:

AbstractSlidingException

getModelYaml

public ModelYamlMysql getModelYaml()