Giter Site home page Giter Site logo

xia_sql's Issues

参数错乱

提交的数据包为 ：{"serviceType":"aaa","data":{"Status":"0,1"},"clientTimeout":123} 时插入的payload会错乱。

hex、unicode编码

可以考虑引号加个hex、unicode编码绕过，如果大佬比较忙，麻烦发下源码，我可以代劳，会写点java代码

源码更新

您好，能更新一下源码么 最新源码还是2.9的旧源码

关于插件测试目标的建议

建议增加新的方式过滤目标，不仅仅使用白名单形式，在实际使用中常常会遇到目标aaa.com域名请求bbb.com的api接口，这时就需要手工一次次添加了。

可以考虑读取burp out-of-scope里的值，或者单独进行设置，支持正则。就是黑名单形式。 这样可以配合其他工具，通过burp的代理来做到批量调用插件进行检测。

获取返回包长度判断建议仅判断body部分长度

byte[] response = requestResponse.getResponse();
IExtensionHelpers helpers = callbacks.getHelpers();
IResponseInfo responseInfo = helpers.analyzeResponse(response);
byte[] responseBodyBytes = Arrays.copyOfRange(response, responseInfo.getBodyOffset(), response.length);
int lengthBody=responseBodyBytes.length;

师傅可以用这个获取response body的长度

最新版json嵌套出现问题

原body

{
  "info": {
    "Refund": "string",
    "Pay": "string",
    "DetailInfo": [
      {
        "Id": "string",
        "Refund": "1111",
        "Poundage": "1"
      }
    ]
  }
}

扫描时会变为

{"Refund":"string","Pay":"string","Refund":"111","Poundage":"1","Id":"string"}

原body

{
  "info": {
    "Ship": "string",
    "Port": "string"
  }
}

扫描时会变为

{
    "Ship": "string",
    "Port": "string"
  }

English version

Hey @smxiazi .. cool project!
Is it possible to create an English version of this awesome plugin?

功能建议

可以添加一些请求头的测试,类似XFF头这种

添加插件报错 我的是jdk17.0.2 burp是v2021.10

java.lang.ClassNotFoundException: burp.BurpExtender
at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:445)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:587)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:520)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:467)
at burp.rw.a(Unknown Source)
at burp.rw.(Unknown Source)
at burp.fdd.a(Unknown Source)
at burp.g03.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:833)
为啥安装不上呢

判断不精确

1、判断注入不太精确 加入延时盲注入payload 可能因为线程问题误报

Query

@smxiazi What if a default check is also added by adding - just before the parameter value like:
test=1 to test=-1

body={"methodId":18,"callSource":1,"pageId":"11"}

关于嵌套类的json处理感觉可以优化一下
body={"methodId":18,"callSource":1,"pageId":"11"}
这一类的目前只会如下扫描：
body={"methodId":18,"callSource":1,"pageId":"11"}'
body={"methodId":18,"callSource":1,"pageId":"11"}''

闪退

这个插件会导致我的burp闪退 无法使用而且结果也不准确

[feature-request] 能不能走burp被动扫描而不是监控proxy

一般插件被动扫描是由burp主动把请求发给插件来扫（利用burpsuite的被动扫描功能，这个过程可以由scope控制，这样很多被动扫描插件不需要单独配置黑白名单），而瞎注用的是http handler，虽然拦截面广，但是还要为它单独配置白名单。所以可不可以让瞎注只走被动扫描呢？

json数据转换bug

嵌套的json格式{"bean":{"aaaa":"","ccc":""},"ddd":"2022-02-14"}被插件处理后变成了
{"aaa":"","ccc":"","ddd":"2022-02-14''"}, 就无法检测响应变化

建议

自定义报错信息没办法保存，建议和自定义sql语句一样保存到本地配置文件里。
按钮配置信息，也建议保存到配置文件里，这样每次加载都不用再配置了。
配置文件可以写成yaml格式，只保存一个就行了

编译jar包

您好，怎么用源码自己编译jar包呀，我用的jdk11，您没有提供

建议列表显示返回包的状态码

列表里只能看到返回包长度和用时啥的，不能快速看到返回包的状态码，需要一个一个点击返回包长度有变化的包看。。。

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.