Package com.jsql.model.injection.strategy.blind

Class AbstractInjectionBoolean<T extends AbstractCallableBoolean<T>>

java.lang.Object

com.jsql.model.injection.strategy.blind.AbstractInjectionBoolean<T>

Direct Known Subclasses:

AbstractInjectionMonobit, InjectionMultibit

public abstract class AbstractInjectionBoolean<T extends AbstractCallableBoolean<T>>
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	AbstractInjectionBoolean.BooleanMode

Field Summary

Fields

Modifier and Type	Field	Description
protected final AbstractInjectionBoolean.BooleanMode	booleanMode
protected final List<String>	falsy
protected final InjectionModel	injectionModel
protected final List<String>	truthy

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractInjectionBoolean(InjectionModel injectionModel, AbstractInjectionBoolean.BooleanMode booleanMode)

Method Summary

Modifier and Type	Method	Description
String	callUrl(String urlString, String metadataInjectionProcess)	Run a HTTP call via the model.
String	callUrl(String urlString, String metadataInjectionProcess, AbstractCallableBoolean<?> callableBoolean)
AbstractInjectionBoolean.BooleanMode	getBooleanMode()
abstract String	getInfoMessage()	Display a message to explain how is blind/time working.
abstract char[]	initializeBinaryMask(List<char[]> bytes, T currentCallable)
abstract void	initializeNextCharacters(String sqlQuery, List<char[]> bytes, AtomicInteger indexCharacter, CompletionService<T> taskCompletionService, AtomicInteger countTasksSubmitted)
String	inject(String sqlQuery, AbstractSuspendable suspendable)	Process the whole boolean injection, character by character, bit by bit.
abstract boolean	isInjectable()	Start one test to verify if boolean works.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

falsy

protected final List<String> falsy

truthy

protected final List<String> truthy

injectionModel

protected final InjectionModel injectionModel

booleanMode

protected final AbstractInjectionBoolean.BooleanMode booleanMode

Constructor Details

AbstractInjectionBoolean

protected AbstractInjectionBoolean(InjectionModel injectionModel,
 AbstractInjectionBoolean.BooleanMode booleanMode)

Method Details

isInjectable

public abstract boolean isInjectable()
                              throws StoppedByUserSlidingException

Start one test to verify if boolean works.

Returns:

true if boolean method is confirmed

Throws:

StoppedByUserSlidingException

initializeNextCharacters

public abstract void initializeNextCharacters(String sqlQuery,
 List<char[]> bytes,
 AtomicInteger indexCharacter,
 CompletionService<T> taskCompletionService,
 AtomicInteger countTasksSubmitted)

initializeBinaryMask

public abstract char[] initializeBinaryMask(List<char[]> bytes,
 T currentCallable)

getInfoMessage

public abstract String getInfoMessage()

Display a message to explain how is blind/time working.

Returns:

inject

public String inject(String sqlQuery,
 AbstractSuspendable suspendable)
              throws StoppedByUserSlidingException

Process the whole boolean injection, character by character, bit by bit.

Parameters:

sqlQuery - SQL query

suspendable - Action a user can stop

Returns:

Final string: SQLiABCDEF...

Throws:

StoppedByUserSlidingException

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess)

Run a HTTP call via the model.

Parameters:

urlString - URL to inject

Returns:

Source code

callUrl

public String callUrl(String urlString,
 String metadataInjectionProcess,
 AbstractCallableBoolean<?> callableBoolean)

getBooleanMode

public AbstractInjectionBoolean.BooleanMode getBooleanMode()