HQLmap
HQLmap copied to clipboard
table_exists methed is not perfect
def table_exists(message):
if ('is not mapped' in message):
return False
else:
return True
The method of checking table exists is check if 'is not mapped' string in response. I'm doubt about this method, and I have an fail example. This is the request url
?isAsc=false&orderBy=name&pageNum=1&pageSize=10
The response is
{"result":"failed","responseCode":"","data":"","errorMsg":"org.hibernate.QueryException: could not resolve property: name of:com.xxx\n\tat org.hibernate.persister.entity.AbstractPropertyMapping.propertyException(AbstractPropertyMapping.java:83
This request is order by a column, if the column does not exist, it will response this exception. I do not think this is a sqli vulnerability.