Package com.jsql.model.injection.strategy.blind

Class InjectionTime

java.lang.Object

com.jsql.model.injection.strategy.blind.AbstractInjectionBit<CallableTime>

com.jsql.model.injection.strategy.blind.AbstractInjectionMonobit<CallableTime>

com.jsql.model.injection.strategy.blind.InjectionTime

public class InjectionTime
extends AbstractInjectionMonobit<CallableTime>

Time attack using parallel threads. Waiting time in seconds, response time exceeded means query is false. Noting that sleep() functions will add up for each line from request. A sleep time of 5 will be executed only if the SELECT returns exactly one line.

Nested Class Summary

Nested classes/interfaces inherited from class com.jsql.model.injection.strategy.blind.AbstractInjectionBit

AbstractInjectionBit.BlindOperator

Field Summary

Fields inherited from class com.jsql.model.injection.strategy.blind.AbstractInjectionBit

blindOperator, injectionModel

Constructor Summary

Constructors

Constructor	Description
InjectionTime(InjectionModel injectionModel, AbstractInjectionBit.BlindOperator blindOperator)	Create time attack initialization.

Method Summary

Modifier and Type	Method	Description
CallableTime	getCallableBitTest(String sqlQuery, int indexChar, int bit)
String	getInfoMessage()	Display a message to explain how is blind/time working.
int	getSleepTime()
boolean	isInjectable()	Start one test to verify if boolean works.

Methods inherited from class com.jsql.model.injection.strategy.blind.AbstractInjectionMonobit

initMaskAsciiChar, initNextChar

Methods inherited from class com.jsql.model.injection.strategy.blind.AbstractInjectionBit

callUrl, callUrl, getBitsUnset, getBlindOperator, inject, isCharCompleteWithCorruptCheck

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

InjectionTime

public InjectionTime(InjectionModel injectionModel,
 AbstractInjectionBit.BlindOperator blindOperator)

Create time attack initialization. If every false requests are under 5 seconds and every true are below 5 seconds, then time attack is confirmed.

Method Details

getCallableBitTest

public CallableTime getCallableBitTest(String sqlQuery,
 int indexChar,
 int bit)

isInjectable

public boolean isInjectable()
                     throws StoppedByUserSlidingException

Description copied from class: AbstractInjectionBit

Start one test to verify if boolean works.

Specified by:

isInjectable in class AbstractInjectionBit<CallableTime>

Returns:

true if boolean method is confirmed

Throws:

StoppedByUserSlidingException

getSleepTime

public int getSleepTime()

getInfoMessage

public String getInfoMessage()

Description copied from class: AbstractInjectionBit

Display a message to explain how is blind/time working.

Specified by:

getInfoMessage in class AbstractInjectionBit<CallableTime>