Skip to content

Commit 13cc41d

Browse files
shack2shack2
committed
update20190811
update20190811
1 parent 8f51e83 commit 13cc41d

11 files changed

Lines changed: 271 additions & 238 deletions

File tree

‎SuperSQLInjection/Main.Designer.cs‎

Lines changed: 170 additions & 170 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎SuperSQLInjection/Main.cs‎

Lines changed: 38 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,12 @@
1515
using System.Web;
1616
using System.Net;
1717
using Amib.Threading;
18-
using System.Management;
19-
using Microsoft.Win32;
2018
using System.Drawing;
2119
using System.Reflection;
2220
using static System.Windows.Forms.ListView;
2321
using SuperSQLInjection.tools.http;
2422
using System.Net.Sockets;
25-
using System.Runtime.InteropServices;
23+
using System.Xml;
2624

2725
namespace SuperSQLInjection
2826
{
@@ -284,7 +282,7 @@ public void HttpDownloadFile(string url, string path)
284282
responseStream.Close();
285283
}
286284

287-
public static int version = 20190810;
285+
public static int version = 20190811;
288286
public static string versionURL = "http://www.shack2.org/soft/getNewVersion?ENNAME=SSuperSQLInjection&NO=" + URLEncode.UrlEncode(Tools.getSystemSid()) + "&VERSION=" + version;
289287
//检查更新
290288
public void checkUpdate()
@@ -1422,6 +1420,36 @@ public void addItemToListView(ListViewItem item)
14221420

14231421
delegate void addItemToListViewByColumnsDelegate(String colvs);
14241422

1423+
public void addItemToListViewBySQLServerXMLData(String xmldata,List<String> columns)
1424+
{
1425+
try {
1426+
ListViewItem lvi = new ListViewItem();
1427+
XmlDocument xml = new XmlDocument();
1428+
xml.LoadXml(xmldata);
1429+
XmlNodeList lines = xml.ChildNodes;
1430+
bool haveData = false;
1431+
for (int i=1; i< columns.Count;i++) {
1432+
lvi.SubItems.Add("");
1433+
}
1434+
if (lines.Count == 1) {
1435+
XmlAttributeCollection abs = lines[0].Attributes;
1436+
foreach (XmlAttribute attr in abs) {
1437+
int index = Tools.FindItemWithIgnoreCase(columns, attr.Name);
1438+
if (index != -1) {
1439+
haveData = true;
1440+
lvi.SubItems[index].Text = HttpUtility.HtmlDecode(attr.Value);
1441+
}
1442+
}
1443+
}
1444+
if (haveData) {
1445+
this.Invoke(new addItemToListViewDelegate(addItemToListView),lvi);
1446+
}
1447+
} catch (Exception e) {
1448+
this.txt_log.Invoke(new showLogDelegate(log), "解析SQLServer注入数据，并添加到ListView发生错误！" + e.Message, LogLevel.waring);
1449+
}
1450+
1451+
}
1452+
14251453
public void addItemToListViewByColumns(String colvs)
14261454
{
14271455
addItemToListViewByColumns(colvs, "\\$\\$\\$");
@@ -5696,7 +5724,8 @@ public void getDataValueByUnionBySQLServer(Object opam)
56965724
GetDataPam gp = (GetDataPam)opam;
56975725
ListViewItem lvi = new ListViewItem();
56985726
String result = getOneDataByUnionOrError(SQLServer.getUnionDataValue(config.columnsCount, config.showColumn, config.unionFill, gp.dbname, gp.table, gp.columns, gp.limit));
5699-
this.Invoke(new addItemToListViewByColumnsDelegate(addItemToListViewByColumns), result);
5727+
//数结果改成xml格式，单独解析
5728+
addItemToListViewBySQLServerXMLData(result, gp.columns);
57005729
this.txt_log.Invoke(new showLogDelegate(log), "获取到第" + gp.limit + "行的值！", LogLevel.info);
57015730
}
57025731
catch (Exception e)
@@ -10031,23 +10060,23 @@ private void file_txt_result_KeyDown(object sender, KeyEventArgs e)
1003110060
{
1003210061
if (e.Modifiers == Keys.Control && e.KeyCode == Keys.A)
1003310062
{
10034-
((RichTextBox)sender).SelectAll();
10063+
((TextBox)sender).SelectAll();
1003510064
}
1003610065
}
1003710066

1003810067
private void cmd_txt_result_KeyDown(object sender, KeyEventArgs e)
1003910068
{
1004010069
if (e.Modifiers == Keys.Control && e.KeyCode == Keys.A)
1004110070
{
10042-
((RichTextBox)sender).SelectAll();
10071+
((TextBox)sender).SelectAll();
1004310072
}
1004410073
}
1004510074

1004610075
private void encode_txt_result_KeyDown(object sender, KeyEventArgs e)
1004710076
{
1004810077
if (e.Modifiers == Keys.Control && e.KeyCode == Keys.A)
1004910078
{
10050-
((RichTextBox)sender).SelectAll();
10079+
((TextBox)sender).SelectAll();
1005110080
}
1005210081
}
1005310082

@@ -10238,7 +10267,7 @@ private void encode_txt_input_KeyDown(object sender, KeyEventArgs e)
1023810267
{
1023910268
if (e.Modifiers == Keys.Control && e.KeyCode == Keys.A)
1024010269
{
10241-
((RichTextBox)sender).SelectAll();
10270+
((TextBox)sender).SelectAll();
1024210271
}
1024310272
}
1024410273

‎SuperSQLInjection/Main.resx‎

Lines changed: 4 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@
131131
AAEAAAD/////AQAAAAAAAAAMAgAAAFdTeXN0ZW0uV2luZG93cy5Gb3JtcywgVmVyc2lvbj00LjAuMC4w
132132
LCBDdWx0dXJlPW5ldXRyYWwsIFB1YmxpY0tleVRva2VuPWI3N2E1YzU2MTkzNGUwODkFAQAAACZTeXN0
133133
ZW0uV2luZG93cy5Gb3Jtcy5JbWFnZUxpc3RTdHJlYW1lcgEAAAAERGF0YQcCAgAAAAkDAAAADwMAAACe
134-
GQAAAk1TRnQBSQFMAgEBDwEAAbABCgGwAQoBEAEAARABAAT/AQkBAAj/AUIBTQE2AQQGAAE2AQQCAAEo
134+
GQAAAk1TRnQBSQFMAgEBDwEAAcABCgHAAQoBEAEAARABAAT/AQkBAAj/AUIBTQE2AQQGAAE2AQQCAAEo
135135
AwABQAMAAUADAAEBAQABCAYAARAYAAGAAgABgAMAAoABAAGAAwABgAEAAYABAAKAAgADwAEAAcAB3AHA
136136
AQAB8AHKAaYBAAEzBQABMwEAATMBAAEzAQACMwIAAxYBAAMcAQADIgEAAykBAANVAQADTQEAA0IBAAM5
137137
AQABgAF8Af8BAAJQAf8BAAGTAQAB1gEAAf8B7AHMAQABxgHWAe8BAAHWAucBAAGQAakBrQIAAf8BMwMA
@@ -266,7 +266,7 @@
266266
AAEAAAD/////AQAAAAAAAAAMAgAAAFdTeXN0ZW0uV2luZG93cy5Gb3JtcywgVmVyc2lvbj00LjAuMC4w
267267
LCBDdWx0dXJlPW5ldXRyYWwsIFB1YmxpY0tleVRva2VuPWI3N2E1YzU2MTkzNGUwODkFAQAAACZTeXN0
268268
ZW0uV2luZG93cy5Gb3Jtcy5JbWFnZUxpc3RTdHJlYW1lcgEAAAAERGF0YQcCAgAAAAkDAAAADwMAAACq
269-
DQAAAk1TRnQBSQFMAgEBBwEAAQgBCgEIAQoBEAEAARABAAT/AQkBAAj/AUIBTQE2AQQGAAE2AQQCAAEo
269+
DQAAAk1TRnQBSQFMAgEBBwEAARgBCgEYAQoBEAEAARABAAT/AQkBAAj/AUIBTQE2AQQGAAE2AQQCAAEo
270270
AwABQAMAASADAAEBAQABCAYAAQgYAAGAAgABgAMAAoABAAGAAwABgAEAAYABAAKAAgADwAEAAcAB3AHA
271271
AQAB8AHKAaYBAAEzBQABMwEAATMBAAEzAQACMwIAAxYBAAMcAQADIgEAAykBAANVAQADTQEAA0IBAAM5
272272
AQABgAF8Af8BAAJQAf8BAAGTAQAB1gEAAf8B7AHMAQABxgHWAe8BAAHWAucBAAGQAakBrQIAAf8BMwMA
@@ -325,37 +325,6 @@
325325
AQEC/wQABP8EAAT/BAABgAEBAYABAQQAAYABAQGAAQEEAAGAAQEBgAEBBAABgAEBAYABAQQAAYABAQGA
326326
AQEEAAGAAQEBgAEBBAABgAEBAYABAQQAAYABAQGAAQEEAAGAAQEBgAEBBAABgAEBAYABAQQAAYABAQGA
327327
AQEEAAGAAQEBgAEBBAAE/wQABP8CAAs=
328-
</value>
329-
</data>
330-
<assembly alias="System.Drawing" name="System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
331-
<data name="data_dbs_tsl_getDatas.Image" type="System.Drawing.Bitmap, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
332-
<value>
333-
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8
334-
YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAIDSURBVDhPpZLrS5NhGMb3j4SWh0oRQVExD4gonkDpg4hG
335-
YKxG6WBogkMZKgPNCEVJFBGdGETEvgwyO9DJE5syZw3PIlPEE9pgBCLZ5XvdMB8Ew8gXbl54nuf63dd9
336-
0OGSnwCahxbPRNPAPMw9Xpg6ZmF46kZZ0xSKzJPIrhpDWsVnpBhGkKx3nAX8Pv7z1zg8OoY/cITdn4fw
337-
bf/C0kYAN3Ma/w3gWfZL5kzTKBxjWyK2DftwI9tyMYCZKXbNHaD91bLYJrDXsYbrWfUKwJrPE9M2M1Oc
338-
VzOOpHI7Jr376Hi9ogHqFIANO0/MmmmbmSmm9a8ze+I4MrNWAdjtoJgWcx+PSzg166yZZ8xM8XvXDix9
339-
c4jIqFYAjoriBV9AhEPv1mH/sonogha0afbZMMZz+yreTGyhpusHwtNNCsA5U1zS4BLxzJIfg299qO32
340-
Ir7UJtZfftyATqeT+8o2D8JSjQrAJblrncYL7ZJ2+bfaFnC/1S1NjL3diRat7qrO7wLRP3HjWsojBeCo
341-
mDEo5mNjuweFGvjWg2EBhCbpkW78htSHHwRyNdmgAFzPEee2iFkzayy2OLXzT4gr6UdUnlXrullsxxQ+
342-
kx0g8BTA3aZlButjSTyjODq/WcQcW/B/Je4OQhLvKQDnzN1mp0nnkvAhR8VuMzNrpm1mpjgkoVwB/v8D
343-
TgDQASA1MVpwzwAAAABJRU5ErkJggg==
344-
</value>
345-
</data>
346-
<data name="data_dbs_tsl_exportDatas.Image" type="System.Drawing.Bitmap, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
347-
<value>
348-
iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8
349-
YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAAIDSURBVDhPpZLrS5NhGMb3j4SWh0oRQVExD4gonkDpg4hG
350-
YKxG6WBogkMZKgPNCEVJFBGdGETEvgwyO9DJE5syZw3PIlPEE9pgBCLZ5XvdMB8Ew8gXbl54nuf63dd9
351-
0OGSnwCahxbPRNPAPMw9Xpg6ZmF46kZZ0xSKzJPIrhpDWsVnpBhGkKx3nAX8Pv7z1zg8OoY/cITdn4fw
352-
bf/C0kYAN3Ma/w3gWfZL5kzTKBxjWyK2DftwI9tyMYCZKXbNHaD91bLYJrDXsYbrWfUKwJrPE9M2M1Oc
353-
VzOOpHI7Jr376Hi9ogHqFIANO0/MmmmbmSmm9a8ze+I4MrNWAdjtoJgWcx+PSzg166yZZ8xM8XvXDix9
354-
c4jIqFYAjoriBV9AhEPv1mH/sonogha0afbZMMZz+yreTGyhpusHwtNNCsA5U1zS4BLxzJIfg299qO32
355-
Ir7UJtZfftyATqeT+8o2D8JSjQrAJblrncYL7ZJ2+bfaFnC/1S1NjL3diRat7qrO7wLRP3HjWsojBeCo
356-
mDEo5mNjuweFGvjWg2EBhCbpkW78htSHHwRyNdmgAFzPEee2iFkzayy2OLXzT4gr6UdUnlXrullsxxQ+
357-
kx0g8BTA3aZlButjSTyjODq/WcQcW/B/Je4OQhLvKQDnzN1mp0nnkvAhR8VuMzNrpm1mpjgkoVwB/v8D
358-
TgDQASA1MVpwzwAAAABJRU5ErkJggg==
359328
</value>
360329
</data>
361330
<metadata name="cms_data_dbs_lvw_data.TrayLocation" type="System.Drawing.Point, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a">
@@ -407,8 +376,9 @@ Connection: close</value>
407376
<value>329, 17</value>
408377
</metadata>
409378
<metadata name="$this.TrayHeight" type="System.Int32, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
410-
<value>172</value>
379+
<value>107</value>
411380
</metadata>
381+
<assembly alias="System.Drawing" name="System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
412382
<data name="$this.Icon" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
413383
<value>
414384
AAABAAEAICAAAAEAIACoEAAAFgAAACgAAAAgAAAAQAAAAAEAIAAAAAAAABAAABILAAASCwAAAAAAAAAA

‎SuperSQLInjection/Properties/AssemblyInfo.cs‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@
3232
// 可以指定所有这些值，也可以使用“内部版本号”和“修订号”的默认值，
3333
// 方法是按如下所示使用“*”:
3434
// [assembly: AssemblyVersion("1.0.*")]
35-
[assembly: AssemblyVersion("1.2019.08.10")]
36-
[assembly: AssemblyFileVersion("1.2019.08.10")]
35+
[assembly: AssemblyVersion("1.2019.08.11")]
36+
[assembly: AssemblyFileVersion("1.2019.08.11")]

‎SuperSQLInjection/Properties/Resources.Designer.cs‎

Lines changed: 12 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎SuperSQLInjection/Properties/Resources.resx‎

Lines changed: 14 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -118,12 +118,12 @@
118118
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
119119
</resheader>
120120
<assembly alias="System.Windows.Forms" name="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
121-
<data name="stop" type="System.Resources.ResXFileRef, System.Windows.Forms">
122-
<value>images\stop.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
123-
</data>
124121
<data name="声明" type="System.Resources.ResXFileRef, System.Windows.Forms">
125122
<value>images\声明.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
126123
</data>
124+
<data name="bug" type="System.Resources.ResXFileRef, System.Windows.Forms">
125+
<value>images\bug.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
126+
</data>
127127
<data name="vers" type="System.Resources.ResXFileRef, System.Windows.Forms">
128128
<value>images\vers.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
129129
</data>
@@ -142,8 +142,11 @@
142142
<data name="版本" type="System.Resources.ResXFileRef, System.Windows.Forms">
143143
<value>images\版本.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
144144
</data>
145-
<data name="lang" type="System.Resources.ResXFileRef, System.Windows.Forms">
146-
<value>images\lang.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
145+
<data name="保存" type="System.Resources.ResXFileRef, System.Windows.Forms">
146+
<value>images\保存.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
147+
</data>
148+
<data name="help" type="System.Resources.ResXFileRef, System.Windows.Forms">
149+
<value>images\help.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
147150
</data>
148151
<data name="手册" type="System.Resources.ResXFileRef, System.Windows.Forms">
149152
<value>images\手册.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
@@ -154,8 +157,8 @@
154157
<data name="tool" type="System.Resources.ResXFileRef, System.Windows.Forms">
155158
<value>images\tool.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
156159
</data>
157-
<data name="保存" type="System.Resources.ResXFileRef, System.Windows.Forms">
158-
<value>images\保存.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
160+
<data name="stop" type="System.Resources.ResXFileRef, System.Windows.Forms">
161+
<value>images\stop.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
159162
</data>
160163
<data name="menu" type="System.Resources.ResXFileRef, System.Windows.Forms">
161164
<value>images\menu.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
@@ -166,13 +169,13 @@
166169
<data name="config" type="System.Resources.ResXFileRef, System.Windows.Forms">
167170
<value>images\config.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
168171
</data>
169-
<data name="help" type="System.Resources.ResXFileRef, System.Windows.Forms">
170-
<value>images\help.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
172+
<data name="lang" type="System.Resources.ResXFileRef, System.Windows.Forms">
173+
<value>images\lang.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
171174
</data>
172175
<data name="getvers" type="System.Resources.ResXFileRef, System.Windows.Forms">
173176
<value>images\getvers.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
174177
</data>
175-
<data name="bug" type="System.Resources.ResXFileRef, System.Windows.Forms">
176-
<value>images\bug.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
178+
<data name="下载" type="System.Resources.ResXFileRef, System.Windows.Forms">
179+
<value>images\下载.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a</value>
177180
</data>
178181
</root>

‎SuperSQLInjection/Properties/images/下载.png‎

333 Bytes
Loading

‎SuperSQLInjection/SuperSQLInjection.csproj‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@
3939
<OutputPath>bin\Debug\</OutputPath>
4040
<DefineConstants>DEBUG;TRACE</DefineConstants>
4141
<ErrorReport>prompt</ErrorReport>
42-
<WarningLevel>4</WarningLevel>
42+
<WarningLevel>0</WarningLevel>
4343
<AllowUnsafeBlocks>false</AllowUnsafeBlocks>
4444
<Prefer32Bit>false</Prefer32Bit>
4545
</PropertyGroup>
@@ -285,6 +285,7 @@
285285
</ItemGroup>
286286
<ItemGroup>
287287
<Content Include="favicon.ico" />
288+
<None Include="Properties\images\下载.png" />
288289
<None Include="Properties\images\bug.png" />
289290
<None Include="Properties\images\版本.png" />
290291
<None Include="Properties\images\声明.png" />

‎SuperSQLInjection/payload/MySQL.cs‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -270,11 +270,11 @@ public static String concatMySQLColumnStr(List<String> columns)
270270
if (columns.Count > 1)
271271
{
272272

273-
sb.Append(columns[i] + ",");
273+
sb.Append("ifnull("+columns[i] + ",0x20),");
274274
}
275275
else
276276
{
277-
sb.Append(columns[i]);
277+
sb.Append("ifnull(" + columns[i]+ ",0x20)");
278278
}
279279

280280
}

0 commit comments

Comments
 (0)