diff options
| author | vanhauser-thc <vh@thc.org> | 2023-12-30 10:49:00 +0100 |
|---|---|---|
| committer | vanhauser-thc <vh@thc.org> | 2023-12-30 10:49:00 +0100 |
| commit | 1eb54c4c3eb4ab4bc12f7f1f80f5ece15b238ef0 (patch) | |
| tree | 5fd6f5afa5aa3717ca88ccfe48f0106daae9b7b7 /instrumentation/afl-compiler-rt.o.c | |
| parent | 98a2a334de15ed08d82c76bfa97d1f22c81f9a7d (diff) | |
| download | afl++-1eb54c4c3eb4ab4bc12f7f1f80f5ece15b238ef0.tar.gz | |
finish injection implementation
Diffstat (limited to 'instrumentation/afl-compiler-rt.o.c')
| -rw-r--r-- | instrumentation/afl-compiler-rt.o.c | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/instrumentation/afl-compiler-rt.o.c b/instrumentation/afl-compiler-rt.o.c index 50bafb9e..39a762b6 100644 --- a/instrumentation/afl-compiler-rt.o.c +++ b/instrumentation/afl-compiler-rt.o.c @@ -2672,12 +2672,13 @@ void __afl_set_persistent_mode(u8 mode) { } +// Marker: ADD_TO_INJECTIONS + void __afl_injection_sql(u8 *buf) { if (likely(buf)) { - if (unlikely(strcasestr((char *)buf, "1'\" OR \"1\"=\"1") || - strcasestr((char *)buf, "1\"' OR '1'='1"))) { + if (unlikely(strstr((char *)buf, "'\"\"'"))) { fprintf(stderr, "ALERT: Detected SQL injection in query: %s\n", buf); abort(); @@ -2692,7 +2693,7 @@ void __afl_injection_ldap(u8 *buf) { if (likely(buf)) { - if (unlikely(strcasestr((char *)buf, "*)(FUZZ=*))(|"))) { + if (unlikely(strstr((char *)buf, "*)(1=*))(|"))) { fprintf(stderr, "ALERT: Detected LDAP injection in query: %s\n", buf); abort(); @@ -2707,7 +2708,7 @@ void __afl_injection_xss(u8 *buf) { if (likely(buf)) { - if (unlikely(strcasestr((char *)buf, "\";FUZZ;\""))) { + if (unlikely(strstr((char *)buf, "1\"><\""))) { fprintf(stderr, "ALERT: Detected XSS injection in content: %s\n", buf); abort(); |