Skip to content

Commit 0080e92

Browse files
lanshuizhiyuelanshuizhiyue
committed
chore: bump version to 1.8.41
1 parent 41dbbdc commit 0080e92

7 files changed

Lines changed: 205 additions & 131 deletions

File tree

‎src/backEnd/config.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@
44
MAX_TASKS_COUNT_LOCK = threading.Lock()
55

66

7-
VERSION = "1.8.40"
7+
VERSION = "1.8.41"

‎src/burpEx/legacy-api/pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66

77
<groupId>com.sqlmapwebui</groupId>
88
<artifactId>sqlmap-webui-burp-legacy</artifactId>
9-
<version>1.8.40</version>
9+
<version>1.8.41</version>
1010
<packaging>jar</packaging>
1111

1212
<name>SQLMap WebUI Burp Extension (Legacy API)</name>

‎src/burpEx/legacy-api/src/main/java/com/sqlmapwebui/burp/BurpExtender.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ public class BurpExtender implements IBurpExtender, IContextMenuFactory, ITab {
4343
private SqlmapUITab uiTab;
4444

4545
private static final String EXTENSION_NAME = "SQLMap WebUI";
46-
private static final String EXTENSION_VERSION = "1.8.40";
46+
private static final String EXTENSION_VERSION = "1.8.41";
4747

4848
/**
4949
* 过滤结果类 - 存储过滤后的纯文本请求和过滤统计

‎src/burpEx/legacy-api/src/main/java/com/sqlmapwebui/burp/dialogs/AboutDialog.java‎

Lines changed: 100 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,104 @@
1111
*/
1212
public class AboutDialog extends JDialog {
1313

14-
private static final String VERSION = "1.8.40";
14+
private static final String VERSION = "1.8.41";
15+
16+
// 帮助内容HTML模板 - 使用模块化组织
17+
private static final String HELP_CONTENT_HTML = "<html><head><style>" +
18+
"body { font-family: 'Microsoft YaHei', sans-serif; font-size: 12px; line-height: 1.6; }" +
19+
"h2 { color: #1976d2; margin: 15px 0 10px 0; border-bottom: 2px solid #1976d2; padding-bottom: 5px; }" +
20+
"h3 { color: #333; margin: 12px 0 8px 0; font-size: 13px; }" +
21+
"h4 { color: #555; margin: 10px 0 6px 0; font-size: 12px; }" +
22+
"p { margin: 5px 0; }" +
23+
"ul, ol { margin: 5px 0 10px 20px; }" +
24+
"li { margin: 4px 0; }" +
25+
"code { background: #f5f5f5; padding: 2px 5px; border-radius: 3px; font-family: Consolas, monospace; font-size: 11px; }" +
26+
".section { margin-bottom: 15px; padding: 10px; background: #fafafa; border-radius: 5px; }" +
27+
".feature-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; margin: 8px 0; }" +
28+
".feature-item { padding: 6px 10px; background: #f0f0f0; border-radius: 4px; font-size: 11px; }" +
29+
".param-list { background: #f8f8f8; padding: 10px; border-radius: 4px; margin: 8px 0; }" +
30+
".param-item { margin: 4px 0; padding: 4px 0; border-bottom: 1px dotted #ddd; }" +
31+
".param-item:last-child { border-bottom: none; }" +
32+
".highlight { background: #fff3cd; padding: 2px 4px; border-radius: 3px; }" +
33+
".new-badge { background: #28a745; color: white; padding: 1px 6px; border-radius: 10px; font-size: 10px; margin-left: 5px; }" +
34+
".tip { background: #e3f2fd; border-left: 3px solid #2196f3; padding: 8px 12px; margin: 10px 0; border-radius: 0 4px 4px 0; }" +
35+
".warning { background: #fff3e0; border-left: 3px solid #ff9800; padding: 8px 12px; margin: 10px 0; border-radius: 0 4px 4px 0; }" +
36+
"</style></head><body>" +
37+
38+
// 快速开始
39+
"<h2>快速开始</h2>" +
40+
"<div class='section'>" +
41+
"<h3>1. 配置服务器</h3>" +
42+
"<p>在「服务器配置」标签页中设置SQLMap WebUI后端地址（默认: <code>http://127.0.0.1:8775</code>）</p>" +
43+
"<p>点击「测试连接」验证连接状态</p>" +
44+
45+
"<h3>2. 发送扫描请求</h3>" +
46+
"<p>在Burp的任意HTTP请求上右键，选择以下选项：</p>" +
47+
"<ul>" +
48+
"<li><strong>Send to SQLMap WebUI</strong>: 使用默认配置快速发送</li>" +
49+
"<li><strong>Send to SQLMap WebUI (选择配置)...</strong>: 选择预设配置发送</li>" +
50+
"</ul>" +
51+
52+
"<h3>3. 查看扫描结果</h3>" +
53+
"<p>打开SQLMap WebUI的Web界面查看扫描任务状态和结果</p>" +
54+
"<p>任务会自动保存到历史配置，方便后续复用</p>" +
55+
"</div>" +
56+
57+
// 扫描配置管理
58+
"<h2>扫描配置管理</h2>" +
59+
"<div class='section'>" +
60+
"<div class='feature-grid'>" +
61+
"<div class='feature-item'><strong>默认配置</strong><br>设置全局默认扫描参数，每次发送请求时自动应用</div>" +
62+
"<div class='feature-item'><strong>常用配置</strong><br>保存常用的配置组合，支持增删改查和引导式编辑</div>" +
63+
"<div class='feature-item'><strong>历史配置</strong><br>自动记录历史扫描使用过的配置，支持排序和分页<span class='new-badge'>NEW</span></div>" +
64+
"<div class='feature-item'><strong>自动保存</strong><br>通过插件创建的任务自动保存到历史配置<span class='new-badge'>NEW</span></div>" +
65+
"</div>" +
66+
"</div>" +
67+
68+
// 常用参数说明
69+
"<h2>常用参数说明</h2>" +
70+
"<div class='param-list'>" +
71+
"<div class='param-item'><code>--level</code> <strong>检测等级</strong> (1-5)，越高检测越全面</div>" +
72+
"<div class='param-item'><code>--risk</code> <strong>风险等级</strong> (1-3)，越高测试越激进</div>" +
73+
"<div class='param-item'><code>--technique</code> <strong>注入技术</strong> (BEUSTQ: B=布尔盲注 E=报错注入 U=联合查询 S=堆叠查询 T=时间盲注 Q=内联查询)</div>" +
74+
"<div class='param-item'><code>--threads</code> <strong>并发线程数</strong> (默认1)</div>" +
75+
"<div class='param-item'><code>--batch</code> <strong>非交互模式</strong>，自动使用默认值</div>" +
76+
"<div class='param-item'><code>--random-agent</code> <strong>随机User-Agent</strong>，避免被WAF拦截</div>" +
77+
"<div class='param-item'><code>--dbms</code> <strong>指定数据库</strong> (mysql/oracle/mssql等)</div>" +
78+
"</div>" +
79+
80+
// 高级功能
81+
"<h2>高级功能<span class='new-badge'>NEW</span></h2>" +
82+
"<div class='section'>" +
83+
"<h3>请求去重</h3>" +
84+
"<p>自动检测并跳过重复请求，基于以下维度判断：</p>" +
85+
"<ul>" +
86+
"<li>请求协议、方法、主机、端口</li>" +
87+
"<li>请求路径和查询参数</li>" +
88+
"<li>请求Body内容</li>" +
89+
"</ul>" +
90+
"<div class='tip'>去重结果会在活动日志中显示，可选择保留或跳过重复请求</div>" +
91+
92+
"<h3>二进制内容检测</h3>" +
93+
"<p>自动检测二进制请求内容（如文件上传），避免发送非文本请求</p>" +
94+
"<div class='warning'>检测到二进制内容时会显示警告，建议跳过此类请求</div>" +
95+
96+
"<h3>中文编码处理</h3>" +
97+
"<p>强制使用UTF-8编码处理HTTP请求，正确处理中文字符<span class='new-badge'>v1.8.11+</span></p>" +
98+
"</div>" +
99+
100+
// 注意事项
101+
"<h2>注意事项</h2>" +
102+
"<div class='section'>" +
103+
"<ul>" +
104+
"<li>确保SQLMap WebUI后端服务已启动并可以访问</li>" +
105+
"<li>使用「测试连接」功能验证配置是否正确</li>" +
106+
"<li>建议在发送前检查请求内容，避免发送敏感信息</li>" +
107+
"<li>本工具仅供授权安全测试使用</li>" +
108+
"</ul>" +
109+
"</div>" +
110+
111+
"</body></html>";
15112

16113
/**
17114
* 自定义Logo组件 - 绘制盾牌+注入针头图标
@@ -222,68 +319,8 @@ private JPanel createHelpPanel() {
222319
JPanel panel = new JPanel(new BorderLayout());
223320
panel.setBorder(new EmptyBorder(15, 15, 15, 15));
224321

225-
String htmlContent = "<html><head><style>" +
226-
"body { font-family: 'Microsoft YaHei', sans-serif; font-size: 12px; line-height: 1.6; }" +
227-
"h2 { color: #1976d2; margin: 15px 0 10px 0; border-bottom: 2px solid #1976d2; padding-bottom: 5px; }" +
228-
"h3 { color: #333; margin: 10px 0 5px 0; }" +
229-
"p { margin: 5px 0; }" +
230-
"ul { margin: 5px 0 10px 20px; }" +
231-
"li { margin: 3px 0; }" +
232-
"code { background: #f5f5f5; padding: 2px 5px; border-radius: 3px; font-family: Consolas, monospace; }" +
233-
".section { margin-bottom: 15px; padding: 10px; background: #fafafa; border-radius: 5px; }" +
234-
"</style></head><body>" +
235-
236-
"<h2>快速开始</h2>" +
237-
"<div class='section'>" +
238-
"<h3>1. 配置服务器</h3>" +
239-
"<p>在「服务器配置」标签页中设置SQLMap WebUI后端地址（默认: http://127.0.0.1:8775）</p>" +
240-
"<p>点击「测试连接」验证连接状态</p>" +
241-
242-
"<h3>2. 发送扫描请求</h3>" +
243-
"<p>在Burp的任意HTTP请求上右键，选择「Send to SQLMap WebUI」</p>" +
244-
"<p>可选择使用默认配置或选择已保存的配置</p>" +
245-
246-
"<h3>3. 查看扫描结果</h3>" +
247-
"<p>打开SQLMap WebUI的Web界面查看扫描任务状态和结果</p>" +
248-
"</div>" +
249-
250-
"<h2>扫描配置管理</h2>" +
251-
"<div class='section'>" +
252-
"<h3>默认配置</h3>" +
253-
"<p>设置全局默认扫描参数，每次发送请求时自动应用。</p>" +
254-
255-
"<h3>常用配置</h3>" +
256-
"<p>保存常用的配置组合，支持增删改查。右键菜单可快速选择使用。</p>" +
257-
"<p>点击「引导式添加/编辑」可视化配置扫描参数。</p>" +
258-
259-
"<h3>历史配置</h3>" +
260-
"<p>自动记录历史扫描使用过的配置，方便复用。</p>" +
261-
"</div>" +
262-
263-
"<h2>常用参数说明</h2>" +
264-
"<div class='section'>" +
265-
"<ul>" +
266-
"<li><code>--level</code>: 检测等级 (1-5)，越高检测越全面</li>" +
267-
"<li><code>--risk</code>: 风险等级 (1-3)，越高测试越激进</li>" +
268-
"<li><code>--technique</code>: 注入技术 (BEUSTQ)</li>" +
269-
"<li><code>--threads</code>: 并发线程数</li>" +
270-
"<li><code>--batch</code>: 非交互模式，自动使用默认值</li>" +
271-
"<li><code>--random-agent</code>: 随机User-Agent</li>" +
272-
"</ul>" +
273-
"</div>" +
274-
275-
"<h2>注意事项</h2>" +
276-
"<div class='section'>" +
277-
"<ul>" +
278-
"<li>确保SQLMap WebUI后端服务已启动</li>" +
279-
"<li>二进制请求（如图片上传）会显示警告提示</li>" +
280-
"<li>支持请求去重功能，避免重复提交相同请求</li>" +
281-
"</ul>" +
282-
"</div>" +
283-
284-
"</body></html>";
285-
286-
JEditorPane editorPane = createHtmlPane(htmlContent);
322+
// 使用预定义的模块化帮助内容
323+
JEditorPane editorPane = createHtmlPane(HELP_CONTENT_HTML);
287324
JScrollPane scrollPane = new JScrollPane(editorPane);
288325
scrollPane.setBorder(BorderFactory.createEmptyBorder());
289326
panel.add(scrollPane, BorderLayout.CENTER);

‎src/burpEx/montoya-api/pom.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66

77
<groupId>com.sqlmapwebui</groupId>
88
<artifactId>sqlmap-webui-burp-montoya</artifactId>
9-
<version>1.8.40</version>
9+
<version>1.8.41</version>
1010
<packaging>jar</packaging>
1111

1212
<name>SQLMap WebUI Burp Extension (Montoya API)</name>

‎src/burpEx/montoya-api/src/main/java/com/sqlmapwebui/burp/SqlmapWebUIExtension.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
public class SqlmapWebUIExtension implements BurpExtension {
2020

2121
private static final String EXTENSION_NAME = "SQLMap WebUI";
22-
private static final String EXTENSION_VERSION = "1.8.40";
22+
private static final String EXTENSION_VERSION = "1.8.41";
2323

2424
private MontoyaApi api;
2525
private ConfigManager configManager;

0 commit comments

Comments
 (0)