Package com.jsql.model.injection.strategy.blind

Class AbstractInjectionBit<T extends AbstractCallableBit<T>>

java.lang.Object

com.jsql.model.injection.strategy.blind.AbstractInjectionBit<T>

Direct Known Subclasses:

AbstractInjectionMonobit, InjectionMultibit

public abstract class AbstractInjectionBit<T extends AbstractCallableBit<T>>
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	AbstractInjectionBit.BlindOperator

Field Summary

Fields

Modifier and Type	Field	Description
protected final AbstractInjectionBit.BlindOperator	blindOperator
protected List<String>	falsyBin
protected List<String>	falsyBit
protected final InjectionModel	injectionModel
protected List<String>	truthyBin
protected List<String>	truthyBit

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractInjectionBit(InjectionModel injectionModel, AbstractInjectionBit.BlindOperator blindOperator)

Method Summary

Modifier and Type	Method	Description
String	callUrl(String urlString, String metadataInjectionProcess)	Run a HTTP call via the model.
String	callUrl(String urlString, String metadataInjectionProcess, AbstractCallableBit<?> callableBoolean)
protected static char[]	getBitsUnset()
AbstractInjectionBit.BlindOperator	getBooleanMode()
abstract String	getInfoMessage()	Display a message to explain how is blind/time working.
abstract char[]	initMaskAsciiChar(List<char[]> bytes, T currentCallable)
abstract void	initNextChar(String sqlQuery, List<char[]> bytes, AtomicInteger indexChar, CompletionService<T> taskCompletionService, AtomicInteger countTasksSubmitted, T currentCallable)
String	inject(String sqlQuery, AbstractSuspendable suspendable)	Process the whole boolean injection, character by character, bit by bit.
protected boolean	injectCharacter(List<char[]> bytes, AtomicInteger countTasksSubmitted, AtomicInteger countBadAsciiCode, T currentCallable)
abstract boolean	isInjectable()	Start one test to verify if boolean works.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

falsyBit

protected List<String> falsyBit

falsyBin

protected List<String> falsyBin

truthyBit

protected List<String> truthyBit

truthyBin

protected List<String> truthyBin

injectionModel

protected final InjectionModel injectionModel

blindOperator

protected final AbstractInjectionBit.BlindOperator blindOperator

Constructor Details

AbstractInjectionBit

protected AbstractInjectionBit(InjectionModel injectionModel,
 AbstractInjectionBit.BlindOperator blindOperator)

Method Details

isInjectable

public abstract boolean isInjectable()
                              throws StoppedByUserSlidingException

Start one test to verify if boolean works.

Returns:

true if boolean method is confirmed

Throws:

StoppedByUserSlidingException

initNextChar

public abstract void initNextChar(String sqlQuery,
 List<char[]> bytes,
 AtomicInteger indexChar,
 CompletionService<T> taskCompletionService,
 AtomicInteger countTasksSubmitted,
 T currentCallable)

initMaskAsciiChar

public abstract char[] initMaskAsciiChar(List<char[]> bytes,
 T currentCallable)

getInfoMessage

public abstract String getInfoMessage()

Display a message to explain how is blind/time working.

inject

public String inject(String sqlQuery,
 AbstractSuspendable suspendable)
              throws StoppedByUserSlidingException

Process the whole boolean injection, character by character, bit by bit.

Parameters:

sqlQuery - SQL query

suspendable - Action a user can stop

Returns:

Final string: SQLiABCDEF...

Throws:

StoppedByUserSlidingException

injectCharacter

protected boolean injectCharacter(List<char[]> bytes,
 AtomicInteger countTasksSubmitted,
 AtomicInteger countBadAsciiCode,
 T currentCallable)
                           throws InjectionFailureException

Throws:

InjectionFailureException

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess)

Run a HTTP call via the model.

Parameters:

urlString - URL to inject

Returns:

Source code

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess,
 AbstractCallableBit<?> callableBoolean)

getBooleanMode

public AbstractInjectionBit.BlindOperator getBooleanMode()

getBitsUnset

protected static char[] getBitsUnset()