-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathSQL_Injection_Patterns.rs
270 lines (265 loc) · 15.9 KB
/
SQL_Injection_Patterns.rs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
use regex::Regex;
fn check_for_sql_injection(query: &str) -> bool {
let sql_injection_patterns = vec![
r"(?i)(\bor\b|\band\b).*?=.*?", // OR/AND 패턴
r"(?i)(\bunion\b|\bselect\b).*?\bfrom\b", // UNION/SELECT 패턴
r"(?i)(\b--\b|;|--\s|/\*)", // 주석 패턴
r"(?i)(\bdrop\b|\binsert\b|\bupdate\b|\bdelete\b|\balter\b)", // DDL 패턴
r"(?i)\bexec\b", // exec 패턴
r"(?i)(\bwaitfor\b|\bdelay\b|\bsleep\b)", // 시간 지연 패턴
r"(?i)\bgrant\b", // 권한 변경 패턴
r"(?i)\b--\b", // SQL 주석 패턴
r"(?i)\bchar\(", // 함수 호출 패턴
r"(?i)\bconvert\(", // 함수 호출 패턴
r"(?i)\bcast\(", // 함수 호출 패턴
r"(?i)\bopenrowset\b", // OPENROWSET 함수 패턴
r"(?i)\bopendatasource\b", // OPENDATASOURCE 함수 패턴
r"(?i)\bselect\b.*\binto\b", // SELECT INTO 패턴
r"(?i)(\bcast\b|\bconvert\b)\(", // CAST/CONVERT 함수 패턴
r"(?i)\btable\b.*\bwhere\b", // TABLE WHERE 패턴
r"(?i)\binformation_schema\b", // INFORMATION_SCHEMA 패턴
r"(?i)\bmaster\b", // MASTER 데이터베이스 패턴
r"(?i)\buser\b.*\bpassword\b", // 사용자 패스워드 패턴
r"(?i)0x[0-9a-fA-F]+", // 헥사값 패턴
r"(?i)\bping\b", // ping 명령어 패턴
r"(?i)xp_cmdshell", // xp_cmdshell 함수 패턴
r"(?i)sp_executesql", // sp_executesql 함수 패턴
r"(?i)\bdump\b", // 데이터 덤프 패턴
r"(?i)\boutfile\b", // 파일 출력 패턴
r"(?i)\bprocedure\b.*\bfor\b", // PROCEDURE FOR 패턴
r"(?i)\bdeclare\b.*\b@.*\bint\b", // DECLARE INT 변수 패턴
r"(?i)select\b.*\bfrom\b.*\bdual\b", // SELECT FROM DUAL 패턴 (Oracle)
r"(?i)\bunion\b.*\bselect\b.*\bnull\b", // UNION SELECT NULL 패턴
r"(?i)\border\b.*\bby\b.*\b[0-9]", // ORDER BY 숫자 패턴
r"(?i)\bcount\b.*\(.*\)", // COUNT 함수 패턴
r"(?i)\bdatabase\b", // DATABASE 패턴
r"(?i)\bexec\b.*\bmaster\b", // EXEC MASTER 패턴
r"(?i)\bexists\b", // EXISTS 패턴
r"(?i)\bconcat\b", // CONCAT 함수 패턴
r"(?i)\bcoalesce\b", // COALESCE 함수 패턴
r"(?i)\bsysobjects\b", // SYSOBJECTS 테이블 패턴
r"(?i)\btruncate\b", // TRUNCATE 테이블 패턴
r"(?i)\bopen\b", // OPEN 함수 패턴
r"(?i)\bfetch\b", // FETCH 함수 패턴
r"(?i)\binsert\b.*\binto\b.*\bvalues\b", // INSERT INTO VALUES 패턴
r"(?i)\bupdate\b.*\bset\b", // UPDATE SET 패턴
r"(?i)\bdelete\b.*\bfrom\b", // DELETE FROM 패턴
r"(?i)\bdrop\b.*\btable\b", // DROP TABLE 패턴
r"(?i)\bselect\b.*\binto\b.*\bfrom\b", // SELECT INTO FROM 패턴
r"(?i)\bif\b.*\bexists\b", // IF EXISTS 패턴
r"(?i)\bselect\b.*\bgroup_concat\b", // SELECT GROUP_CONCAT 패턴
r"(?i)\bselect\b.*\bsleep\b", // SELECT SLEEP 패턴
r"(?i)\bselect\b.*\bbenchmark\b", // SELECT BENCHMARK 패턴
r"(?i)\bselect\b.*\bpg_sleep\b", // SELECT PG_SLEEP 패턴
r"(?i)\bselect\b.*\brand\b", // SELECT RAND 패턴
r"(?i)\bselect\b.*\bfloor\b", // SELECT FLOOR 패턴
r"(?i)\bselect\b.*\bpwd\b", // SELECT PWD 패턴
r"(?i)\bshow\b.*\bdatabases\b", // SHOW DATABASES 패턴
r"(?i)\bshow\b.*\btables\b", // SHOW TABLES 패턴
r"(?i)\bshow\b.*\bcolumns\b", // SHOW COLUMNS 패턴
r"(?i)\bselect\b.*\bcurrent_user\b", // SELECT CURRENT_USER 패턴
r"(?i)\bselect\b.*\bcurrent_database\b", // SELECT CURRENT_DATABASE 패턴
r"(?i)\bselect\b.*\bversion\b", // SELECT VERSION 패턴
r"(?i)\bselect\b.*\buser\b", // SELECT USER 패턴
r"(?i)\bselect\b.*\bpassword\b", // SELECT PASSWORD 패턴
r"(?i)\bselect\b.*\bencrypt\b", // SELECT ENCRYPT 패턴
r"(?i)\bselect\b.*\bdecrypt\b", // SELECT DECRYPT 패턴
r"(?i)\bselect\b.*\bhaving\b", // SELECT HAVING 패턴
r"(?i)\bselect\b.*\bload_file\b", // SELECT LOAD_FILE 패턴
r"(?i)\bselect\b.*\binto\b.*\boutfile\b", // SELECT INTO OUTFILE 패턴
r"(?i)\bselect\b.*\bbulk\b", // SELECT BULK 패턴
r"(?i)\bselect\b.*\bhex\b", // SELECT HEX 패턴
r"(?i)\bselect\b.*\bsubstring\b", // SELECT SUBSTRING 패턴
r"(?i)\bselect\b.*\bsubstr\b", // SELECT SUBSTR 패턴
r"(?i)\bselect\b.*\blike\b", // SELECT LIKE 패턴
r"(?i)\bselect\b.*\brpad\b", // SELECT RPAD 패턴
r"(?i)\bselect\b.*\blpad\b", // SELECT LPAD 패턴
r"(?i)\bselect\b.*\bcharindex\b", // SELECT CHARINDEX 패턴
r"(?i)\bselect\b.*\bsoundex\b", // SELECT SOUNDEX 패턴
r"(?i)\bselect\b.*\bchar\b", // SELECT CHAR 패턴
r"(?i)\bselect\b.*\bunion\b.*\ball\b", // SELECT UNION ALL 패턴
r"(?i)\bselect\b.*\bcount\b.*\bdistinct\b", // SELECT COUNT DISTINCT 패턴
r"(?i)\bselect\b.*\bcolumn\b", // SELECT COLUMN 패턴
r"(?i)\bselect\b.*\bprocedure\b", // SELECT PROCEDURE 패턴
r"(?i)\bselect\b.*\bfunction\b", // SELECT FUNCTION 패턴
r"(?i)\bselect\b.*\btrigger\b", // SELECT TRIGGER 패턴
r"(?i)\bselect\b.*\bevent\b", // SELECT EVENT 패턴
r"(?i)\bselect\b.*\bviews\b", // SELECT VIEWS 패턴
r"(?i)\bselect\b.*\bview\b", // SELECT VIEW 패턴
r"(?i)\bselect\b.*\bsequence\b", // SELECT SEQUENCE 패턴
r"(?i)\bselect\b.*\bschema\b", // SELECT SCHEMA 패턴
r"(?i)\bselect\b.*\btable\b", // SELECT TABLE 패턴
r"(?i)\bdumpfile\b", // DUMPFILE 패턴
r"(?i)\bload_file\b", // LOAD_FILE 패턴
r"(?i)\bschema\b", // SCHEMA 패턴
r"(?i)\binformation_schema\b", // INFORMATION_SCHEMA 패턴
r"(?i)\bsys\b", // SYS 패턴
r"(?i)\bselect\b.*\bmysql\b", // SELECT MYSQL 패턴
r"(?i)\bselect\b.*\bperformance_schema\b", // SELECT PERFORMANCE_SCHEMA 패턴
r"(?i)\bselect\b.*\bprocesslist\b", // SELECT PROCESSLIST 패턴
r"(?i)\bselect\b.*\bhosts\b", // SELECT HOSTS 패턴
r"(?i)\bselect\b.*\bplugins\b", // SELECT PLUGINS 패턴
r"(?i)\bselect\b.*\busers\b", // SELECT USERS 패턴
r"(?i)\bselect\b.*\buser\b", // SELECT USER 패턴
r"(?i)\bselect\b.*\bgroup\b", // SELECT GROUP 패턴
r"(?i)\bselect\b.*\badmin\b", // SELECT ADMIN 패턴
r"(?i)\bselect\b.*\broles\b", // SELECT ROLES 패턴
r"(?i)\bselect\b.*\bprivileges\b", // SELECT PRIVILEGES 패턴
r"(?i)\bselect\b.*\bsecurity\b", // SELECT SECURITY 패턴
r"(?i)\bselect\b.*\bauth\b", // SELECT AUTH 패턴
r"(?i)\bselect\b.*\bauthorization\b", // SELECT AUTHORIZATION 패턴
r"(?i)\bselect\b.*\bauthenticate\b", // SELECT AUTHENTICATE 패턴
r"(?i)\bselect\b.*\bpermission\b", // SELECT PERMISSION 패턴
r"(?i)\bselect\b.*\bpermissions\b", // SELECT PERMISSIONS 패턴
r"(?i)\bselect\b.*\bacl\b", // SELECT ACL 패턴
r"(?i)\bselect\b.*\bacls\b", // SELECT ACLS 패턴
r"(?i)\bselect\b.*\bgrant\b", // SELECT GRANT 패턴
r"(?i)\bselect\b.*\brevoke\b", // SELECT REVOKE 패턴
r"(?i)\bselect\b.*\bcredentials\b", // SELECT CREDENTIALS 패턴
r"(?i)\bselect\b.*\bcredential\b", // SELECT CREDENTIAL 패턴
r"(?i)\bselect\b.*\bsudo\b", // SELECT SUDO 패턴
r"(?i)\bselect\b.*\bsu\b", // SELECT SU 패턴
r"(?i)\bselect\b.*\broot\b", // SELECT ROOT 패턴
r"(?i)\bselect\b.*\bshell\b", // SELECT SHELL 패턴
r"(?i)\bselect\b.*\bsh\b", // SELECT SH 패턴
r"(?i)\bselect\b.*\bbash\b", // SELECT BASH 패턴
r"(?i)\bselect\b.*\bzsh\b", // SELECT ZSH 패턴
r"(?i)\bselect\b.*\bssh\b", // SELECT SSH 패턴
r"(?i)\bselect\b.*\brsh\b", // SELECT RSH 패턴
r"(?i)\bselect\b.*\brlogin\b", // SELECT RLOGIN 패턴
r"(?i)\bselect\b.*\brcp\b", // SELECT RCP 패턴
r"(?i)\bselect\b.*\bftp\b", // SELECT FTP 패턴
r"(?i)\bselect\b.*\bsftp\b", // SELECT SFTP 패턴
r"(?i)\bselect\b.*\btelnet\b", // SELECT TELNET 패턴
r"(?i)\bselect\b.*\brpc\b", // SELECT RPC 패턴
r"(?i)\bselect\b.*\bport\b", // SELECT PORT 패턴
r"(?i)\bselect\b.*\bports\b", // SELECT PORTS 패턴
r"(?i)\bselect\b.*\bnetstat\b", // SELECT NETSTAT 패턴
r"(?i)\bselect\b.*\bping\b", // SELECT PING 패턴
r"(?i)\bselect\b.*\btraceroute\b", // SELECT TRACEROUTE 패턴
r"(?i)\bselect\b.*\bnmap\b", // SELECT NMAP 패턴
r"(?i)\bselect\b.*\bwhois\b", // SELECT WHOIS 패턴
r"(?i)\bselect\b.*\bdig\b", // SELECT DIG 패턴
r"(?i)\bselect\b.*\bnameserver\b", // SELECT NAMESERVER 패턴
r"(?i)\bselect\b.*\bdns\b", // SELECT DNS 패턴
r"(?i)\bselect\b.*\bdomain\b", // SELECT DOMAIN 패턴
r"(?i)\bselect\b.*\bdomainname\b", // SELECT DOMAINNAME 패턴
r"(?i)\bselect\b.*\bdnssec\b", // SELECT DNSSEC 패턴
r"(?i)\bselect\b.*\bzone\b", // SELECT ZONE 패턴
r"(?i)\bselect\b.*\bzones\b", // SELECT ZONES 패턴
r"(?i)\bselect\b.*\bnslookup\b", // SELECT NSLOOKUP 패턴
r"(?i)\bselect\b.*\bdig\b", // SELECT DIG 패턴
r"(?i)\bselect\b.*\bip\b", // SELECT IP 패턴
r"(?i)\bselect\b.*\bipv4\b", // SELECT IPV4 패턴
r"(?i)\bselect\b.*\bipv6\b", // SELECT IPV6 패턴
r"(?i)\bselect\b.*\bmac\b", // SELECT MAC 패턴
r"(?i)\bselect\b.*\baddress\b", // SELECT ADDRESS 패턴
r"(?i)\bselect\b.*\bgateway\b", // SELECT GATEWAY 패턴
r"(?i)\bselect\b.*\brouting\b", // SELECT ROUTING 패턴
r"(?i)\bselect\b.*\binterface\b", // SELECT INTERFACE 패턴
r"(?i)\bselect\b.*\bdevice\b", // SELECT DEVICE 패턴
r"(?i)\bselect\b.*\bhostname\b", // SELECT HOSTNAME 패턴
r"(?i)\bselect\b.*\bhost\b", // SELECT HOST 패턴
r"(?i)\bselect\b.*\bsubnet\b", // SELECT SUBNET 패턴
r"(?i)\bselect\b.*\bnetwork\b", // SELECT NETWORK 패턴
r"(?i)\bselect\b.*\bnetworks\b", // SELECT NETWORKS 패턴
r"(?i)\bselect\b.*\btopology\b", // SELECT TOPOLOGY 패턴
r"(?i)\bselect\b.*\btcp\b", // SELECT TCP 패턴
r"(?i)\bselect\b.*\budp\b", // SELECT UDP 패턴
r"(?i)\blicence\b", // SELECT LICENCE 패턴
r"(?i)\blicense\b", // SELECT LICENSE 패턴
r"(?i)\bselect\b.*\bkey\b", // SELECT KEY 패턴
r"(?i)\bselect\b.*\bkeys\b", // SELECT KEYS 패턴
r"(?i)\bselect\b.*\bcertificate\b", // SELECT CERTIFICATE 패턴
r"(?i)\bselect\b.*\bcertificates\b", // SELECT CERTIFICATES 패턴
r"(?i)\bselect\b.*\bcert\b", // SELECT CERT 패턴
r"(?i)\bselect\b.*\bca\b", // SELECT CA 패턴
r"(?i)\bselect\b.*\bcertificate_authority\b", // SELECT CERTIFICATE AUTHORITY 패턴
r"(?i)\bselect\b.*\bchain\b", // SELECT CHAIN 패턴
r"(?i)\bselect\b.*\bcrl\b", // SELECT CRL 패턴
r"(?i)\bselect\b.*\bcertification\b", // SELECT CERTIFICATION 패턴
r"(?i)\bselect\b.*\bssl\b", // SELECT SSL 패턴
r"(?i)\bselect\b.*\btls\b", // SELECT TLS 패턴
r"(?i)\bselect\b.*\bhash\b", // SELECT HASH 패턴
r"(?i)\bselect\b.*\bdigest\b", // SELECT DIGEST 패턴
r"(?i)\bselect\b.*\bsignature\b", // SELECT SIGNATURE 패턴
r"(?i)\bselect\b.*\bsignatures\b", // SELECT SIGNATURES 패턴
r"(?i)\bselect\b.*\bkeypair\b", // SELECT KEYPAIR 패턴
r"(?i)\bselect\b.*\bpublic\b", // SELECT PUBLIC 패턴
r"(?i)\bselect\b.*\bprivate\b", // SELECT PRIVATE 패턴
r"(?i)\bselect\b.*\bsecure\b", // SELECT SECURE 패턴
r"(?i)\bselect\b.*\bencryption\b", // SELECT ENCRYPTION 패턴
r"(?i)\bselect\b.*\bdecryption\b", // SELECT DECRYPTION 패턴
r"(?i)\bselect\b.*\bpgp\b", // SELECT PGP 패턴
r"(?i)\bselect\b.*\bgpg\b", // SELECT GPG 패턴
r"(?i)\bselect\b.*\bpem\b", // SELECT PEM 패턴
r"(?i)\bselect\b.*\bpkcs\b", // SELECT PKCS 패턴
r"(?i)\bselect\b.*\bpgp\b", // SELECT PGP 패턴
r"(?i)\bselect\b.*\bx509\b", // SELECT X509 패턴
r"(?i)\bselect\b.*\bkeygen\b", // SELECT KEYGEN 패턴
r"(?i)\bselect\b.*\bpk\b", // SELECT PK 패턴
r"(?i)\bselect\b.*\bpkcs\b", // SELECT PKCS 패턴
r"(?i)\bselect\b.*\bcsr\b", // SELECT CSR 패턴
r"(?i)\bselect\b.*\bder\b", // SELECT DER 패턴
r"(?i)\bselect\b.*\bkey\b", // SELECT KEY 패턴
r"(?i)\bselect\b.*\brsa\b", // SELECT RSA 패턴
r"(?i)\bselect\b.*\brsa_public\b", // SELECT RSA PUBLIC 패턴
r"(?i)\bselect\b.*\brsa_private\b", // SELECT RSA PRIVATE 패턴
r"(?i)\bselect\b.*\becdsa\b", // SELECT ECDSA 패턴
r"(?i)\bselect\b.*\becdh\b", // SELECT ECDH 패턴
r"(?i)\bselect\b.*\bkey_exchange\b", // SELECT KEY EXCHANGE 패턴
r"(?i)\bselect\b.*\bdh\b", // SELECT DH 패턴
r"(?i)\bselect\b.*\bdhe\b", // SELECT DHE 패턴
r"(?i)\bselect\b.*\brandom\b", // SELECT RANDOM 패턴
r"(?i)\bselect\b.*\bsalt\b", // SELECT SALT 패턴
r"(?i)\bselect\b.*\bnonce\b", // SELECT NONCE 패턴
r"(?i)\bselect\b.*\bhmac\b", // SELECT HMAC 패턴
r"(?i)\bselect\b.*\bsha\b", // SELECT SHA 패턴
r"(?i)\bselect\b.*\bmd5\b", // SELECT MD5 패턴
r"(?i)\bselect\b.*\bsha1\b", // SELECT SHA1 패턴
r"(?i)\bselect\b.*\bsha256\b", // SELECT SHA256 패턴
r"(?i)\bselect\b.*\bsha512\b", // SELECT SHA512 패턴
r"(?i)\bselect\b.*\bripemd\b", // SELECT RIPEMD 패턴
r"(?i)\bselect\b.*\bripemd160\b", // SELECT RIPEMD160 패턴
r"(?i)\bselect\b.*\bblake\b", // SELECT BLAKE 패턴
r"(?i)\bselect\b.*\bblake2\b", // SELECT BLAKE2 패턴
r"(?i)\bselect\b.*\btiger\b", // SELECT TIGER 패턴
r"(?i)\bselect\b.*\bwhirlpool\b", // SELECT WHIRLPOOL 패턴
r"(?i)\bselect\b.*\bhash\b", // SELECT HASH 패턴
r"(?i)\bselect\b.*\bhashes\b", // SELECT HASHES 패턴
r"(?i)\bselect\b.*\bdigest\b", // SELECT DIGEST 패턴
r"(?i)\bselect\b.*\bdigests\b", // SELECT DIGESTS 패턴
r"(?i)\bselect\b.*\bsignature\b", // SELECT SIGNATURE 패턴
r"(?i)\bselect\b.*\bsignatures\b", // SELECT SIGNATURES 패턴
r"(?i)\bselect\b.*\bcert\b", // SELECT CERT 패턴
r"(?i)\bselect\b.*\bcerts\b", // SELECT CERTS 패턴
r"(?i)\bselect\b.*\bcertificate\b", // SELECT CERTIFICATE 패턴
r"(?i)\bselect\b.*\bcertificates\b", // SELECT CERTIFICATES 패턴
r"(?i)\bselect\b.*\bpem\b", // SELECT PEM 패턴
r"(?i)\bselect\b.*\bpkcs\b", // SELECT PKCS 패턴
r"(?i)\bselect\b.*\bx509\b", // SELECT X509 패턴
r"(?i)\bselect\b.*\brsa\b", // SELECT RSA 패턴
r"(?i)\bselect\b.*\becdh\b", // SELECT ECDH 패턴
r"(?i)\bselect\b.*\bdhe\b", // SELECT DHE 패턴
r"(?i)\bselect\b.*\bsha\b", // SELECT SHA 패턴
r"(?i)\bselect\b.*\bmd5\b", // SELECT MD5 패턴
r"(?i)\bselect\b.*\bsalt\b", // SELECT SALT 패턴
r"(?i)\bselect\b.*\bnonce\b", // SELECT NONCE 패턴
];
for pattern in sql_injection_patterns {
let re = Regex::new(pattern).unwrap();
if re.is_match(query) {
return true;
}
}
false
}
// It may be updated later
//___ ___ _ ______ ______ _
//| \/ | | | | ___ \ | ___| | |
//| . . | __ _ __| | ___ | |_/ / _ _ | |_ ___ _ __ __ _ | |
//| |\/| | / _` | / _` | / _ \ | ___ \| | | | | _| / _ \| '__| / _` || |
//| | | || (_| || (_| || __/ | |_/ /| |_| | | | | __/| | | (_| || |
//\_| |_/ \__,_| \__,_| \___| \____/ \__, | \_| \___||_| \__,_||_|
// __/ |
//