Package com.jsql.model.injection.strategy.blind

Class AbstractInjectionBit<T extends AbstractCallableBit<T>>

java.lang.Object

com.jsql.model.injection.strategy.blind.AbstractInjectionBit<T>

Direct Known Subclasses:

AbstractInjectionMonobit, InjectionMultibit

public abstract class AbstractInjectionBit<T extends AbstractCallableBit<T>>
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	AbstractInjectionBit.BlindOperator

Field Summary

Fields

Modifier and Type	Field	Description
protected final AbstractInjectionBit.BlindOperator	blindOperator
protected final InjectionModel	injectionModel

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractInjectionBit(InjectionModel injectionModel, AbstractInjectionBit.BlindOperator blindOperator)

Method Summary

Modifier and Type	Method	Description
String	callUrl(String urlString, String metadataInjectionProcess)	Run a HTTP call via the model.
String	callUrl(String urlString, String metadataInjectionProcess, AbstractCallableBit<?> callableBoolean)
protected static char[]	getBitsUnset()
AbstractInjectionBit.BlindOperator	getBlindOperator()
abstract String	getInfoMessage()	Display a message to explain how is blind/time working.
abstract char[]	initMaskAsciiChar(List<char[]> bytes, T currentCallable)
abstract void	initNextChar(String sqlQuery, List<char[]> bytes, AtomicInteger indexChar, CompletionService<T> taskCompletionService, AtomicInteger countTasksSubmitted, AtomicInteger countBadAsciiCode, T currentCallable)
String	inject(String sqlQuery, AbstractSuspendable suspendable)	Process the whole boolean injection, character by character, bit by bit.
protected boolean	isCharCompleteWithCorruptCheck(List<char[]> bytes, AtomicInteger countBadAsciiCode, T currentCallable)
abstract boolean	isInjectable()	Start one test to verify if boolean works.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

injectionModel

protected final InjectionModel injectionModel

blindOperator

protected final AbstractInjectionBit.BlindOperator blindOperator

Constructor Details

AbstractInjectionBit

protected AbstractInjectionBit(InjectionModel injectionModel,
 AbstractInjectionBit.BlindOperator blindOperator)

Method Details

isInjectable

public abstract boolean isInjectable()
                              throws StoppedByUserSlidingException

Start one test to verify if boolean works.

Returns:

true if boolean method is confirmed

Throws:

StoppedByUserSlidingException

initNextChar

public abstract void initNextChar(String sqlQuery,
 List<char[]> bytes,
 AtomicInteger indexChar,
 CompletionService<T> taskCompletionService,
 AtomicInteger countTasksSubmitted,
 AtomicInteger countBadAsciiCode,
 T currentCallable)

initMaskAsciiChar

public abstract char[] initMaskAsciiChar(List<char[]> bytes,
 T currentCallable)

getInfoMessage

public abstract String getInfoMessage()

Display a message to explain how is blind/time working.

inject

public String inject(String sqlQuery,
 AbstractSuspendable suspendable)
              throws StoppedByUserSlidingException

Process the whole boolean injection, character by character, bit by bit.

Parameters:

sqlQuery - SQL query

suspendable - Action a user can stop

Returns:

Final string: SQLiABCDEF...

Throws:

StoppedByUserSlidingException

isCharCompleteWithCorruptCheck

protected boolean isCharCompleteWithCorruptCheck(List<char[]> bytes,
 AtomicInteger countBadAsciiCode,
 T currentCallable)
                                          throws InjectionFailureException

Throws:

InjectionFailureException

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess)

Run a HTTP call via the model.

Parameters:

urlString - URL to inject

Returns:

Source code

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess,
 AbstractCallableBit<?> callableBoolean)

getBlindOperator

public AbstractInjectionBit.BlindOperator getBlindOperator()

getBitsUnset

protected static char[] getBitsUnset()