Package com.jsql.model.accessible

Class ResourceAccess

java.lang.Object

com.jsql.model.accessible.ResourceAccess

public class ResourceAccess
extends Object

Resource access object. Get information from file system, commands, webpage.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ADD_FUNC
static final String	ADD_LOID
static final String	BODY_CONFIRM
static final String	EXPLOIT_DOT_UPL
static final String	EXPLOIT_DOT_WEB
static final String	FILE_READ
static final String	LOID_NOT_FOUND
static final String	READ_LOID
static final String	RUN_FUNC
static final String	SQL_CONFIRM_CMD
static final String	SQL_CONFIRM_RESULT
static final String	SQL_DOT_PHP
static final String	TBL_CREATE
static final String	TBL_DROP
static final String	TBL_DUMP
static final String	TBL_FILL
static final String	TBL_READ
static final String	TEMPLATE_ERROR
static final String	UDF_RUN_CMD
static final String	UPLOAD_FAILURE
static final String	UPLOAD_SUCCESSFUL
static final String	WEB_CONFIRM_CMD
static final String	WEB_CONFIRM_RESULT
static final String	WRITE_LOID

Constructor Summary

Constructors

Constructor	Description
ResourceAccess(InjectionModel injectionModel)

Method Summary

Modifier and Type	Method	Description
int	callAdminPage(CompletionService<CallableHttpHead> taskCompletionService, int nbAdminPagesFound)
String	callCommand(String urlCommand)
String	checkUrls(String urlExploit, String nameExploit, BinaryOperator<String> biFuncGetRequest)
int	createAdminPages(String urlInjection, List<String> pageNames)	Check if every page in the list responds 200 Success.
ExploitDerby	getExploitDerby()
ExploitH2	getExploitH2()
ExploitHsqldb	getExploitHsqldb()
ExploitMysql	getExploitMysql()
ExploitOracle	getExploitOracle()
ExploitPostgres	getExploitPostgres()
ExploitSqlite	getExploitSqlite()
String	getResult(String query, String metadata)
String	getResultWithCatch(String query, String metadata)
boolean	isMysqlReadDenied()	Check if current user can read files.
boolean	isScanStopped()
boolean	isSearchAdminStopped()
void	logSearchAdminPage(int nbAdminPagesFound, int submittedTasks, int tasksHandled)
List<String>	readFile(List<String> pathsFiles)	Attempt to read files in parallel by their path from the website using injection.
String	runSqlShell(String command, UUID uuidShell, String urlExploit, String username, String password)	Execute SQL request into terminal defined by URL path, eventually override with database user/pass identifiers.
String	runSqlShell(String command, UUID uuidShell, String urlExploit, String username, String password, boolean isResultSentToView)
String	runWebShell(String command, UUID uuidShell, String urlExploit)	Run a shell command on host.
void	setScanStopped(boolean isScanStopped)
void	stopSearchAdmin()
void	stopSearchFile()	Mark the search of files to stop.
HttpResponse<String>	upload(File file, String url, InputStream streamToUpload)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

WEB_CONFIRM_CMD

public static final String WEB_CONFIRM_CMD

WEB_CONFIRM_RESULT

public static final String WEB_CONFIRM_RESULT

See Also:

• Constant Field Values

SQL_CONFIRM_CMD

public static final String SQL_CONFIRM_CMD

See Also:

• Constant Field Values

SQL_CONFIRM_RESULT

public static final String SQL_CONFIRM_RESULT

See Also:

• Constant Field Values

SQL_DOT_PHP

public static final String SQL_DOT_PHP

See Also:

• Constant Field Values

EXPLOIT_DOT_UPL

public static final String EXPLOIT_DOT_UPL

See Also:

• Constant Field Values

EXPLOIT_DOT_WEB

public static final String EXPLOIT_DOT_WEB

See Also:

• Constant Field Values

UPLOAD_SUCCESSFUL

public static final String UPLOAD_SUCCESSFUL

See Also:

• Constant Field Values

UPLOAD_FAILURE

public static final String UPLOAD_FAILURE

See Also:

• Constant Field Values

LOID_NOT_FOUND

public static final String LOID_NOT_FOUND

See Also:

• Constant Field Values

ADD_LOID

public static final String ADD_LOID

See Also:

• Constant Field Values

WRITE_LOID

public static final String WRITE_LOID

See Also:

• Constant Field Values

READ_LOID

public static final String READ_LOID

See Also:

• Constant Field Values

ADD_FUNC

public static final String ADD_FUNC

See Also:

• Constant Field Values

RUN_FUNC

public static final String RUN_FUNC

See Also:

• Constant Field Values

BODY_CONFIRM

public static final String BODY_CONFIRM

See Also:

• Constant Field Values

UDF_RUN_CMD

public static final String UDF_RUN_CMD

See Also:

• Constant Field Values

TBL_CREATE

public static final String TBL_CREATE

See Also:

• Constant Field Values

TBL_FILL

public static final String TBL_FILL

See Also:

• Constant Field Values

TBL_DUMP

public static final String TBL_DUMP

See Also:

• Constant Field Values

TBL_DROP

public static final String TBL_DROP

See Also:

• Constant Field Values

TBL_READ

public static final String TBL_READ

See Also:

• Constant Field Values

FILE_READ

public static final String FILE_READ

See Also:

• Constant Field Values

TEMPLATE_ERROR

public static final String TEMPLATE_ERROR

See Also:

• Constant Field Values

Constructor Details

ResourceAccess

public ResourceAccess(InjectionModel injectionModel)

Method Details

createAdminPages

public int createAdminPages(String urlInjection,
 List<String> pageNames)

Check if every page in the list responds 200 Success.

Parameters:

pageNames - List of admin pages to test

callAdminPage

public int callAdminPage(CompletionService<CallableHttpHead> taskCompletionService,
 int nbAdminPagesFound)

logSearchAdminPage

public void logSearchAdminPage(int nbAdminPagesFound,
 int submittedTasks,
 int tasksHandled)

checkUrls

public String checkUrls(String urlExploit,
 String nameExploit,
 BinaryOperator<String> biFuncGetRequest)

callCommand

public String callCommand(String urlCommand)

runWebShell

public String runWebShell(String command,
 UUID uuidShell,
 String urlExploit)

Run a shell command on host.

Parameters:

command - The command to execute

uuidShell - An unique identifier for terminal

urlExploit - Web path of the shell

runSqlShell

public String runSqlShell(String command,
 UUID uuidShell,
 String urlExploit,
 String username,
 String password)

Execute SQL request into terminal defined by URL path, eventually override with database user/pass identifiers.

Parameters:

command - SQL request to execute

uuidShell - Identifier of terminal sending the request

urlExploit - URL to send SQL request against

username - Username [optional]

password - password [optional]

runSqlShell

public String runSqlShell(String command,
 UUID uuidShell,
 String urlExploit,
 String username,
 String password,
 boolean isResultSentToView)

upload

public HttpResponse<String> upload(File file,
 String url,
 InputStream streamToUpload)
                            throws IOException,
JSqlException,
InterruptedException

Throws:

IOException

JSqlException

InterruptedException

isMysqlReadDenied

public boolean isMysqlReadDenied()
                          throws JSqlException

Check if current user can read files.

Returns:

True if user can read file, false otherwise

Throws:

JSqlException - when an error occurs during injection

readFile

public List<String> readFile(List<String> pathsFiles)
                      throws JSqlException,
InterruptedException,
ExecutionException

Attempt to read files in parallel by their path from the website using injection. Reading file needs a FILE right on the server. The user can interrupt the process at any time.

Parameters:

pathsFiles - List of file paths to read

Throws:

JSqlException - when an error occurs during injection

InterruptedException - if the current thread was interrupted while waiting

ExecutionException - if the computation threw an exception

getResult

public String getResult(String query,
 String metadata)
                 throws JSqlException

Throws:

JSqlException

getResultWithCatch

public String getResultWithCatch(String query,
 String metadata)

stopSearchFile

public void stopSearchFile()

Mark the search of files to stop. Any ongoing file reading is interrupted and any new file read is cancelled.

stopSearchAdmin

public void stopSearchAdmin()

getExploitSqlite

public ExploitSqlite getExploitSqlite()

getExploitMysql

public ExploitMysql getExploitMysql()

getExploitOracle

public ExploitOracle getExploitOracle()

getExploitPostgres

public ExploitPostgres getExploitPostgres()

isSearchAdminStopped

public boolean isSearchAdminStopped()

setScanStopped

public void setScanStopped(boolean isScanStopped)

isScanStopped

public boolean isScanStopped()

getExploitHsqldb

public ExploitHsqldb getExploitHsqldb()

getExploitH2

public ExploitH2 getExploitH2()

getExploitDerby

public ExploitDerby getExploitDerby()