Package com.jsql.model

Class InjectionModel

java.lang.Object

java.util.concurrent.SubmissionPublisher<Request>

com.jsql.model.AbstractModelObservable

com.jsql.model.InjectionModel

All Implemented Interfaces:

Serializable, AutoCloseable, Flow.Publisher<Request>

public class InjectionModel
extends AbstractModelObservable
implements Serializable

Model class of MVC pattern for processing SQL injection automatically.
Different views can be attached to this observable, like Swing or command line, in order to separate the functional job from the graphical processing.
The Model has a specific database vendor and strategy which run an automatic injection to get name of databases, tables, columns and values, and it can also retrieve resources like files and shell.
Tasks are run in multi-threads in general to speed the process.

See Also:

• Serialized Form

Field Summary

Fields

Modifier and Type	Field	Description
static final String	BR
static final String	STAR

Fields inherited from class com.jsql.model.AbstractModelObservable

isStoppedByUser

Constructor Summary

Constructors

Constructor	Description
InjectionModel()

Method Summary

Modifier and Type	Method	Description
void	appendAnalysisReport(String analysisReport)
void	appendAnalysisReport(String analysisReport, boolean isInit)
void	beginInjection()	Prepare the injection process, can be interrupted by the user (via shouldStopAll).
DataAccess	getDataAccess()
static String	getImplicitReason(Throwable e)
String	getIndexesInUrl()
MediatorMethod	getMediatorMethod()
MediatorStrategy	getMediatorStrategy()
MediatorUtils	getMediatorUtils()
MediatorVendor	getMediatorVendor()
PropertiesUtil	getPropertiesUtil()
ResourceAccess	getResourceAccess()
String	inject(String dataInjection, boolean isUsingIndex, String metadataInjectionProcess, AbstractCallableBit<?> callableBoolean, boolean isReport)	Run an HTTP connection to the web server.
void	resetModel()	Reset each injection attributes: Database metadata, General Thread status, Strategy.
void	sendResponseFromSite(String message, String source)	Display source code in console.
void	setIndexesInUrl(String indexesInUrl)
void	setIsScanning(boolean isScanning)
boolean	shouldErasePreviousInjection()

Methods inherited from class com.jsql.model.AbstractModelObservable

getReportWithIndexes, getReportWithoutIndex, getReportWithoutIndex, injectWithIndexes, injectWithoutIndex, injectWithoutIndex, isStoppedByUser, sendToViews, setIsStoppedByUser

Methods inherited from class java.util.concurrent.SubmissionPublisher

close, closeExceptionally, consume, estimateMaximumLag, estimateMinimumDemand, getClosedException, getExecutor, getMaxBufferCapacity, getNumberOfSubscribers, getSubscribers, hasSubscribers, isClosed, isSubscribed, offer, offer, submit, subscribe

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

STAR

public static final String STAR

See Also:

• Constant Field Values

BR

public static final String BR

See Also:

• Constant Field Values

Constructor Details

InjectionModel

public InjectionModel()

Method Details

resetModel

public void resetModel()

Reset each injection attributes: Database metadata, General Thread status, Strategy.

beginInjection

public void beginInjection()

Prepare the injection process, can be interrupted by the user (via shouldStopAll). Erase all attributes eventually defined in a previous injection. Run by Scan, Standard and TU.

getImplicitReason

public static String getImplicitReason(Throwable e)

inject

public String inject(String dataInjection,
 boolean isUsingIndex,
 String metadataInjectionProcess,
 AbstractCallableBit<?> callableBoolean,
 boolean isReport)

Run an HTTP connection to the web server.

Specified by:

inject in class AbstractModelObservable

Parameters:

dataInjection - SQL query

Returns:

source code of current page

sendResponseFromSite

public void sendResponseFromSite(String message,
 String source)

Display source code in console.

Parameters:

message - Error message

source - Text to display in console

getIndexesInUrl

public String getIndexesInUrl()

setIndexesInUrl

public void setIndexesInUrl(String indexesInUrl)

shouldErasePreviousInjection

public boolean shouldErasePreviousInjection()

setIsScanning

public void setIsScanning(boolean isScanning)

getPropertiesUtil

public PropertiesUtil getPropertiesUtil()

getMediatorUtils

public MediatorUtils getMediatorUtils()

getMediatorVendor

public MediatorVendor getMediatorVendor()

getMediatorMethod

public MediatorMethod getMediatorMethod()

getDataAccess

public DataAccess getDataAccess()

getResourceAccess

public ResourceAccess getResourceAccess()

getMediatorStrategy

public MediatorStrategy getMediatorStrategy()

appendAnalysisReport

public void appendAnalysisReport(String analysisReport)

appendAnalysisReport

public void appendAnalysisReport(String analysisReport,
 boolean isInit)