gfwleak/k18-ntcs-web-ntc
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

完善字典表数据插入sql语句

Browse Source
This commit is contained in:
wangwei
2019-05-23 15:17:27 +08:00
parent 25c2bb790e
commit 39cbf62517
1 changed files with 16 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
src/main/resources/sql/20190521/insert_dict.sql
View File

@@ -1,36 +1,30 @@
#劫持相关字典表 insert语句中的156即dictionary_id应替换为select筛选后中id字段的值
#劫持相关字典表
INSERT INTO `sys_data_dictionary_name`(`module_name`, `mark`, `remark`, `revision`, `create_time`, `modify_time`, `status`)
VALUES ('劫持文件内容格式', 'CONTENT_TYPE_HIJACK', 'hijack content-type', '', '2019-05-21 00:00:00', '2019-05-21 00:00:00', 1);
SELECT * FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK';
INSERT into sys_data_dictionary_item(item_code,item_value,item_sort,`status`,type,dictionary_id)
VALUES('image/gif','image/gif',0,1,1,156),
('image/jpeg','image/jpeg',0,1,1,156),
('image/png','image/png',0,1,1,156),
('image/svg+xml','image/svg+xml',0,1,1,156),
('application/x-msdos-program','application/x-msdos-program',0,1,1,156),
('application/x-msdownload','application/x-msdownload',0,1,1,156),
('application/octet-stream','application/octet-stream',0,1,1,156),
('application/vnd.android.package-archive','application/vnd.android.package-archive',0,1,1,156),
('text/html','text/html',0,1,1,156);
VALUES('image/gif','image/gif',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('image/jpeg','image/jpeg',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('image/png','image/png',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('image/svg+xml','image/svg+xml',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('application/x-msdos-program','application/x-msdos-program',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('application/x-msdownload','application/x-msdownload',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('application/octet-stream','application/octet-stream',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('application/vnd.android.package-archive','application/vnd.android.package-archive',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK')),
('text/html','text/html',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_HIJACK'));
#文件策略相关字典表 insert语句中的157即dictionary_id应替换为select筛选后中id字段的值
#文件策略相关字典表
INSERT INTO `sys_data_dictionary_name`(`module_name`, `mark`, `remark`, `revision`, `create_time`, `modify_time`, `status`)
VALUES('文件策略内容格式', 'CONTENT_TYPE_FILESTRATEGY', 'fileStrategy content-type', '', '2019-05-21 00:00:00', '2019-05-21 00:00:00', 1);
SELECT * FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_FILESTRATEGY';
INSERT into sys_data_dictionary_item(item_code,item_value,item_sort,`status`,type,dictionary_id)
VALUES('template','template',0,1,1,157),
('html','html',0,1,1,157);
VALUES('template','template',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_FILESTRATEGY')),
('html','html',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_FILESTRATEGY'));
#注入脚本相关字典表 insert语句中的158即dictionary_id应替换为select筛选后中id字段的值
#注入脚本相关字典表
INSERT INTO `sys_data_dictionary_name`(`module_name`, `mark`, `remark`, `revision`, `create_time`, `modify_time`, `status`)
VALUES('注入脚本文件内容格式', 'CONTENT_TYPE_INSERTSCRIPT', 'insertScript content-type', '', '2019-05-21 00:00:00', '2019-05-21 00:00:00', 1);
SELECT * FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_INSERTSCRIPT';
INSERT into sys_data_dictionary_item(item_code,item_value,item_sort,`status`,type,dictionary_id)
VALUES('css','css',0,1,1,158),
('js','js',0,1,1,158);
VALUES('css','css',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_INSERTSCRIPT')),
('js','js',0,1,1,(SELECT id FROM sys_data_dictionary_name WHERE mark='CONTENT_TYPE_INSERTSCRIPT'));