├── LICENSE ├── README.md ├── SQLEXP.py ├── images ├── image-20200427175012921.png ├── image-20200427175055280.png ├── image-20200427183437621.png ├── image-20200427185702838.png ├── image-20200427185838021.png └── image-20200427190147278.png ├── lib ├── __init__.py ├── controller │ ├── __init__.py │ ├── action.py │ ├── action.py.bak │ └── hander.py ├── core │ ├── __init__.py │ ├── common.py │ ├── data.py │ ├── datatype.py │ ├── dbs │ │ ├── __init__.py │ │ ├── databases.py │ │ ├── mssql │ │ │ ├── mssql_B.py │ │ │ ├── mssql_E.py │ │ │ ├── mssql_T.py │ │ │ └── mssql_U.py │ │ ├── mysql │ │ │ ├── mysql_B.py │ │ │ ├── mysql_E.py │ │ │ ├── mysql_T.py │ │ │ └── mysql_U.py │ │ └── oracle │ │ │ ├── oracle_B.py │ │ │ ├── oracle_E.py │ │ │ ├── oracle_T.py │ │ │ └── oracle_U.py │ ├── defaults.py │ ├── enums.py │ ├── log.py │ ├── option.py │ ├── request │ │ ├── __init__.py │ │ ├── connection.py │ │ └── hackhttp.py │ └── settings.py ├── parse │ ├── __init__.py │ ├── cmdline.py │ └── payload.py └── utils │ ├── __init__.py │ └── check_platform.py ├── output └── files │ └── log.txt ├── paper └── SQL_BypassWaf.pdf ├── req.txt ├── tamper ├── __init__.py ├── mysql_safedog_bypass.py ├── mysql_yunsuo_bypass.py └── workxz.py └── thirdparty ├── __init__.py ├── ansistrm ├── __init__.py └── ansistrm.py ├── colorama ├── __init__.py ├── ansi.py ├── ansitowin32.py ├── initialise.py ├── win32.py └── winterm.py ├── prettytable ├── __init__.py └── prettytable.py └── termcolor ├── __init__.py └── termcolor.py /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/README.md -------------------------------------------------------------------------------- /SQLEXP.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/SQLEXP.py -------------------------------------------------------------------------------- /images/image-20200427175012921.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427175012921.png -------------------------------------------------------------------------------- /images/image-20200427175055280.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427175055280.png -------------------------------------------------------------------------------- /images/image-20200427183437621.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427183437621.png -------------------------------------------------------------------------------- /images/image-20200427185702838.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427185702838.png -------------------------------------------------------------------------------- /images/image-20200427185838021.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427185838021.png -------------------------------------------------------------------------------- /images/image-20200427190147278.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/images/image-20200427190147278.png -------------------------------------------------------------------------------- /lib/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/__init__.py -------------------------------------------------------------------------------- /lib/controller/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/controller/__init__.py -------------------------------------------------------------------------------- /lib/controller/action.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/controller/action.py -------------------------------------------------------------------------------- /lib/controller/action.py.bak: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/controller/action.py.bak -------------------------------------------------------------------------------- /lib/controller/hander.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/controller/hander.py -------------------------------------------------------------------------------- /lib/core/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/__init__.py -------------------------------------------------------------------------------- /lib/core/common.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/common.py -------------------------------------------------------------------------------- /lib/core/data.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/data.py -------------------------------------------------------------------------------- /lib/core/datatype.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/datatype.py -------------------------------------------------------------------------------- /lib/core/dbs/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/__init__.py -------------------------------------------------------------------------------- /lib/core/dbs/databases.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/databases.py -------------------------------------------------------------------------------- /lib/core/dbs/mssql/mssql_B.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mssql/mssql_B.py -------------------------------------------------------------------------------- /lib/core/dbs/mssql/mssql_E.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mssql/mssql_E.py -------------------------------------------------------------------------------- /lib/core/dbs/mssql/mssql_T.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mssql/mssql_T.py -------------------------------------------------------------------------------- /lib/core/dbs/mssql/mssql_U.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mssql/mssql_U.py -------------------------------------------------------------------------------- /lib/core/dbs/mysql/mysql_B.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mysql/mysql_B.py -------------------------------------------------------------------------------- /lib/core/dbs/mysql/mysql_E.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mysql/mysql_E.py -------------------------------------------------------------------------------- /lib/core/dbs/mysql/mysql_T.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mysql/mysql_T.py -------------------------------------------------------------------------------- /lib/core/dbs/mysql/mysql_U.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/mysql/mysql_U.py -------------------------------------------------------------------------------- /lib/core/dbs/oracle/oracle_B.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/oracle/oracle_B.py -------------------------------------------------------------------------------- /lib/core/dbs/oracle/oracle_E.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/oracle/oracle_E.py -------------------------------------------------------------------------------- /lib/core/dbs/oracle/oracle_T.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/oracle/oracle_T.py -------------------------------------------------------------------------------- /lib/core/dbs/oracle/oracle_U.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/dbs/oracle/oracle_U.py -------------------------------------------------------------------------------- /lib/core/defaults.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/defaults.py -------------------------------------------------------------------------------- /lib/core/enums.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/enums.py -------------------------------------------------------------------------------- /lib/core/log.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/log.py -------------------------------------------------------------------------------- /lib/core/option.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/option.py -------------------------------------------------------------------------------- /lib/core/request/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/request/__init__.py -------------------------------------------------------------------------------- /lib/core/request/connection.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/request/connection.py -------------------------------------------------------------------------------- /lib/core/request/hackhttp.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/request/hackhttp.py -------------------------------------------------------------------------------- /lib/core/settings.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/core/settings.py -------------------------------------------------------------------------------- /lib/parse/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/parse/__init__.py -------------------------------------------------------------------------------- /lib/parse/cmdline.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/parse/cmdline.py -------------------------------------------------------------------------------- /lib/parse/payload.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/parse/payload.py -------------------------------------------------------------------------------- /lib/utils/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/utils/__init__.py -------------------------------------------------------------------------------- /lib/utils/check_platform.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/lib/utils/check_platform.py -------------------------------------------------------------------------------- /output/files/log.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/output/files/log.txt -------------------------------------------------------------------------------- /paper/SQL_BypassWaf.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/paper/SQL_BypassWaf.pdf -------------------------------------------------------------------------------- /req.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/req.txt -------------------------------------------------------------------------------- /tamper/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/tamper/__init__.py -------------------------------------------------------------------------------- /tamper/mysql_safedog_bypass.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/tamper/mysql_safedog_bypass.py -------------------------------------------------------------------------------- /tamper/mysql_yunsuo_bypass.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/tamper/mysql_yunsuo_bypass.py -------------------------------------------------------------------------------- /tamper/workxz.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/tamper/workxz.py -------------------------------------------------------------------------------- /thirdparty/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/__init__.py -------------------------------------------------------------------------------- /thirdparty/ansistrm/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/ansistrm/__init__.py -------------------------------------------------------------------------------- /thirdparty/ansistrm/ansistrm.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/ansistrm/ansistrm.py -------------------------------------------------------------------------------- /thirdparty/colorama/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/__init__.py -------------------------------------------------------------------------------- /thirdparty/colorama/ansi.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/ansi.py -------------------------------------------------------------------------------- /thirdparty/colorama/ansitowin32.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/ansitowin32.py -------------------------------------------------------------------------------- /thirdparty/colorama/initialise.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/initialise.py -------------------------------------------------------------------------------- /thirdparty/colorama/win32.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/win32.py -------------------------------------------------------------------------------- /thirdparty/colorama/winterm.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/colorama/winterm.py -------------------------------------------------------------------------------- /thirdparty/prettytable/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/prettytable/__init__.py -------------------------------------------------------------------------------- /thirdparty/prettytable/prettytable.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/prettytable/prettytable.py -------------------------------------------------------------------------------- /thirdparty/termcolor/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/termcolor/__init__.py -------------------------------------------------------------------------------- /thirdparty/termcolor/termcolor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ggg4566/SQLEXP/HEAD/thirdparty/termcolor/termcolor.py --------------------------------------------------------------------------------