shack2/SuperSQLInjectionV1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

20200209

Browse Source 
bug修复
This commit is contained in:
shack2
2020-02-09 18:12:44 +08:00
parent 46e5831a49
commit bbe5a271d2
4 changed files with 6 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
SuperSQLInjection/Main.cs
View File

@@ -286,7 +286,7 @@ namespace SuperSQLInjection
responseStream.Close(); responseStream.Close();
} }
public static int version = 20191212; public static int version = 20200209;
public static string versionURL = "http://www.shack2.org/soft/getNewVersion?ENNAME=SSuperSQLInjection&NO=" + URLEncode.UrlEncode(Tools.getSystemSid()) + "&VERSION=" + version; public static string versionURL = "http://www.shack2.org/soft/getNewVersion?ENNAME=SSuperSQLInjection&NO=" + URLEncode.UrlEncode(Tools.getSystemSid()) + "&VERSION=" + version;
//检查更新 //检查更新
public void checkUpdate() public void checkUpdate()
@@ -2706,7 +2706,6 @@ namespace SuperSQLInjection
{ {
int mid = 0; int mid = 0;
String payload = ""; String payload = "";
Boolean lastexists = false;
while (start <= end) while (start <= end)
{ {
//2分法获取中间数字 //2分法获取中间数字

6
SuperSQLInjection/Properties/AssemblyInfo.cs
View File

@@ -10,7 +10,7 @@ using System.Runtime.InteropServices;
[assembly: AssemblyConfiguration("")] [assembly: AssemblyConfiguration("")]
[assembly: AssemblyCompany("www.shack2.org")] [assembly: AssemblyCompany("www.shack2.org")]
[assembly: AssemblyProduct("超级SQL注入工具")] [assembly: AssemblyProduct("超级SQL注入工具")]
[assembly: AssemblyCopyright("Copyright © 2014-2019")] [assembly: AssemblyCopyright("Copyright © 2014-2020")]
[assembly: AssemblyTrademark("")] [assembly: AssemblyTrademark("")]
[assembly: AssemblyCulture("")] [assembly: AssemblyCulture("")]
@@ -32,5 +32,5 @@ using System.Runtime.InteropServices;
// 可以指定所有这些值，也可以使用“内部版本号”和“修订号”的默认值， // 可以指定所有这些值，也可以使用“内部版本号”和“修订号”的默认值，
// 方法是按如下所示使用“*”: // 方法是按如下所示使用“*”:
// [assembly: AssemblyVersion("1.0.*")] // [assembly: AssemblyVersion("1.0.*")]
[assembly: AssemblyVersion("1.2019.12.12")] [assembly: AssemblyVersion("1.2020.02.09")]
[assembly: AssemblyFileVersion("1.2019.12.12")] [assembly: AssemblyFileVersion("1.2020.02.09")]

4
SuperSQLInjection/payload/MySQL.cs
View File

@@ -260,7 +260,7 @@ namespace SuperSQLInjection.payload
/// <returns></returns> /// <returns></returns>
public static String concatMySQLColumnStr(List<String> columns) public static String concatMySQLColumnStr(List<String> columns)
{ {
StringBuilder sb = new StringBuilder("concat(0x5e5e21,concat_ws("+ Comm.COLUMNS_SPLIT_HEX_STR + ","); StringBuilder sb = new StringBuilder("concat(0x5e5e21,convert(concat_ws("+ Comm.COLUMNS_SPLIT_HEX_STR + ",");
for (int i = 0; i < columns.Count; i++) for (int i = 0; i < columns.Count; i++)
{ {
if (columns.Count > 1) if (columns.Count > 1)
@@ -278,7 +278,7 @@ namespace SuperSQLInjection.payload
{ {
sb.Remove(sb.Length - 1, 1); sb.Remove(sb.Length - 1, 1);
} }
sb.Append("),0x215e5e)"); sb.Append(") using UTF8),0x215e5e)");
return sb.ToString(); return sb.ToString();

1
SuperSQLInjection/tools/http/HTTP.cs
View File

@@ -68,7 +68,6 @@ namespace SuperSQLInjection.tools
if (!String.IsNullOrEmpty(key)&&body.IndexOf(key) != -1) if (!String.IsNullOrEmpty(key)&&body.IndexOf(key) != -1)
{ {
return true; return true;
break;
} }
} }
} }