Package com.jsql.model.injection.strategy

Class AbstractStrategy

java.lang.Object

com.jsql.model.injection.strategy.AbstractStrategy

Direct Known Subclasses:

StrategyInjectionBlind, StrategyInjectionError, StrategyInjectionMultibit, StrategyInjectionNormal, StrategyInjectionStacked, StrategyInjectionTime

public abstract class AbstractStrategy
extends Object

Define a strategy to inject SQL with methods like Error and Time.

Field Summary

Fields

Modifier and Type	Field	Description
protected static final String	FORMAT_CHECKING_STRATEGY
protected static final String	FORMAT_SKIP_STRATEGY_DISABLED
protected static final String	FORMAT_STRATEGY_NOT_IMPLEMENTED
protected final InjectionModel	injectionModel
protected boolean	isApplicable	True if injection can be used, false otherwise.
protected static final String	KEY_LOG_CHECKING_STRATEGY
protected static final String	KEY_LOG_VULNERABLE

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractStrategy(InjectionModel injectionModel)

Method Summary

Modifier and Type	Method	Description
abstract void	activateWhenApplicable()	Change model strategy to current applicable strategy only when not already set.
protected abstract void	allow(int... i)	Inform the view that this strategy can be used.
abstract void	checkApplicability()	Test if this strategy can be used to inject SQL.
abstract String	getName()	Get the injection strategy name.
abstract String	getPerformanceLength()	Get number of characters you can obtain from the strategy.
abstract String	inject(String sqlQuery, String startPosition, AbstractSuspendable stoppable, String metadataInjectionProcess)	Start the strategy work.
boolean	isApplicable()
void	markVulnerability(Interaction message, int... indexErrorStrategy)
void	setApplicable(boolean isApplicable)
String	toString()
protected abstract void	unallow(int... i)	Inform the view that this strategy can't be used.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

KEY_LOG_CHECKING_STRATEGY

protected static final String KEY_LOG_CHECKING_STRATEGY

See Also:

• Constant Field Values

KEY_LOG_VULNERABLE

protected static final String KEY_LOG_VULNERABLE

See Also:

• Constant Field Values

FORMAT_STRATEGY_NOT_IMPLEMENTED

protected static final String FORMAT_STRATEGY_NOT_IMPLEMENTED

See Also:

• Constant Field Values

FORMAT_SKIP_STRATEGY_DISABLED

protected static final String FORMAT_SKIP_STRATEGY_DISABLED

See Also:

• Constant Field Values

FORMAT_CHECKING_STRATEGY

protected static final String FORMAT_CHECKING_STRATEGY

See Also:

• Constant Field Values

isApplicable

protected boolean isApplicable

True if injection can be used, false otherwise.

injectionModel

protected final InjectionModel injectionModel

Constructor Details

AbstractStrategy

protected AbstractStrategy(InjectionModel injectionModel)

Method Details

checkApplicability

public abstract void checkApplicability()
                                 throws JSqlException

Test if this strategy can be used to inject SQL.

Throws:

JSqlException

allow

protected abstract void allow(int... i)

Inform the view that this strategy can be used.

unallow

protected abstract void unallow(int... i)

Inform the view that this strategy can't be used.

inject

public abstract String inject(String sqlQuery,
 String startPosition,
 AbstractSuspendable stoppable,
 String metadataInjectionProcess)
                       throws StoppedByUserSlidingException

Start the strategy work.

Returns:

Source code

Throws:

StoppedByUserSlidingException

activateWhenApplicable

public abstract void activateWhenApplicable()

Change model strategy to current applicable strategy only when not already set. Normal > Stacked > Error > Multibit > Blind > Time

getPerformanceLength

public abstract String getPerformanceLength()

Get number of characters you can obtain from the strategy.

getName

public abstract String getName()

Get the injection strategy name.

markVulnerability

public void markVulnerability(Interaction message,
 int... indexErrorStrategy)

toString

public String toString()

Overrides:

toString in class Object

isApplicable

public boolean isApplicable()

setApplicable

public void setApplicable(boolean isApplicable)