AbstractInjectionBoolean.java

package com.jsql.model.injection.strategy.blind;

import com.jsql.model.InjectionModel;

import com.jsql.model.accessible.DataAccess;

import com.jsql.model.bean.util.Interaction;

import com.jsql.model.bean.util.Request;

import com.jsql.model.exception.InjectionFailureException;

import com.jsql.model.exception.StoppedByUserSlidingException;

import com.jsql.model.suspendable.AbstractSuspendable;

import com.jsql.util.LogLevelUtil;

import org.apache.logging.log4j.LogManager;

import org.apache.logging.log4j.Logger;

import java.util.ArrayList;

import java.util.List;

import java.util.concurrent.CompletionService;

import java.util.concurrent.ExecutionException;

import java.util.concurrent.ExecutorCompletionService;

import java.util.concurrent.ExecutorService;

import java.util.concurrent.atomic.AtomicInteger;

public abstract class AbstractInjectionBoolean<T extends AbstractCallableBoolean<T>> {

    /**

     * Log4j logger sent to view.

     */

    // Every FALSE SQL statements will be checked,

    // more statements means a more robust application

    protected final List<String> falsy;

    // Every TRUE SQL statements will be checked,

    // more statements means a more robust application

    protected final List<String> truthy;

    }

    protected final InjectionModel injectionModel;

    protected final BooleanMode booleanMode;

    /**

     * Start one test to verify if boolean works.

     * @return true if boolean method is confirmed

     */

    public abstract boolean isInjectable() throws StoppedByUserSlidingException;

    public abstract void initializeNextCharacters(

        String sqlQuery,

        List<char[]> bytes,

        AtomicInteger indexCharacter,

        CompletionService<T> taskCompletionService,

        AtomicInteger countTasksSubmitted

    );

    public abstract char[] initializeBinaryMask(List<char[]> bytes, T currentCallable);

    /**

     * Display a message to explain how is blind/time working.

     * @return

     */

    public abstract String getInfoMessage();

    /**

     * Process the whole boolean injection, character by character, bit by bit.

     * @param sqlQuery SQL query

     * @param suspendable Action a user can stop

     * @return Final string: SQLiABCDEF...

     */

    public String inject(String sqlQuery, AbstractSuspendable suspendable) throws StoppedByUserSlidingException {

        // List of the characters, each one represented by an array of 8 bits

        // e.g. SQLi: bytes[0] => 01010011:S, bytes[1] => 01010001:Q ...

        // Cursor for current character position

        // Concurrent URL requests

        // Process the job until there is no more active task,

        // in other word until all HTTP requests are done

            }

            try {

                // The URL call is done, bring back the finished task

                // One task has just ended, decrease active tasks by 1

                // If SQL result is not empty, then add a new unknown character,

                // and define a new array of 8 undefined bit.

                // Then add 8 bits requests for that new character.

                }

        }

    }

    private static String convert(List<char[]> bytes) {

            try {

                // Byte string not fully constructed : 0x1x010x

                // Ignore

    }

    private void injectCharacter(List<char[]> bytes, AtomicInteger countTasksSubmitted, AtomicInteger countBadAsciiCode, T currentCallable) throws InjectionFailureException {

        // Process url that has just checked one bit, convert bits to chars,

        // and change current bit from undefined to 0 or 1

        // Inform the View if bits array is complete, else nothing #Need fix

                }

            }

                asciiCodeBinary

                + "="

                + currentCallable.charText

            );

        }

    private String stop(List<char[]> bytes, ExecutorService taskExecutor) {

        // Get current progress and display

            try {

                // Byte string not fully constructed : 0x1x010x

                // Ignore

    }

    /**

     * Run a HTTP call via the model.

     * @param urlString URL to inject

     * @return Source code

     */

    public String callUrl(String urlString, String metadataInjectionProcess) {

    }

    public String callUrl(String urlString, String metadataInjectionProcess, AbstractCallableBoolean<?> callableBoolean) {

    }

    public BooleanMode getBooleanMode() {

    }

}

Mutations