Class: Msf::Exploit::SQLi::SQLitei::BooleanBasedBlind

Inherits:
Common
  • Object
show all
Includes:
BooleanBasedBlindMixin
Defined in:
lib/msf/core/exploit/sqli/sqlitei/boolean_based_blind.rb

Overview

Boolean-Based Blind SQL injection support for SQLite

Constant Summary

Constants inherited from Common

Common::ENCODERS

Instance Attribute Summary

Attributes inherited from Common

#concat_separator, #datastore, #framework, #null_replacement, #safe, #second_concat_separator, #truncation_length

Attributes included from Rex::Ui::Subscriber::Input

#user_input

Attributes included from Rex::Ui::Subscriber::Output

#user_output

Instance Method Summary collapse

Methods included from BooleanBasedBlindMixin

#blind_request, #run_sql

Methods inherited from Common

#dump_table_fields, #enum_table_columns, #enum_table_names, #initialize, #version, #write_to_file

Methods inherited from Common

#initialize, #raw_run_sql, #run_sql

Methods included from Module::UI

#init_ui

Methods included from Module::UI::Message

#print_error, #print_good, #print_prefix, #print_status, #print_warning

Methods included from Module::UI::Message::Verbose

#vprint_error, #vprint_good, #vprint_status, #vprint_warning

Methods included from Module::UI::Line

#print_line, #print_line_prefix

Methods included from Module::UI::Line::Verbose

#vprint_line

Methods included from Rex::Ui::Subscriber

#copy_ui, #init_ui, #reset_ui

Methods included from Rex::Ui::Subscriber::Input

#gets

Methods included from Rex::Ui::Subscriber::Output

#flush, #print, #print_blank_line, #print_error, #print_good, #print_line, #print_status, #print_warning

Constructor Details

This class inherits a constructor from Msf::Exploit::SQLi::SQLitei::Common

Instance Method Details

#test_vulnerable ⇒ Boolean

This method checks if the target is vulnerable to Blind boolean-based injection by checking that the values returned by the block for some boolean queries are correct.

Returns:

  • (Boolean) —

    Whether the check confirmed that boolean-based blind SQL injection works



13
14
15
16
17
 
# File 'lib/msf/core/exploit/sqli/sqlitei/boolean_based_blind.rb', line 13

def test_vulnerable
  out_true = blind_request('1=1')
  out_false = blind_request('1=2')
  out_true && !out_false
end