+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Web Development (https://hackforums.net/forumdisplay.php?fid=183)
+---- Thread: [PHP] [SOURCE] SQLi Exploiter [SOURCE] (/showthread.php?tid=2841135)
[SOURCE] SQLi Exploiter [SOURCE] - Ego Inc - Sep 5, 2012
This is something I made a while back and decided I would share with you all, this is the code for a web based SQLi automated exploiter (Similar to SQLMap for those of you who know what that is).
Basically you put your vulnerable link in and hit go, it then enumerates the databases, then you select a db, it lists the tables and so forth.... All the way to actually dumping the data.
Hope you enjoy as a lot of work went into this 🤝
sqlpwn.php
http://pastebin.com/46H7gaqd
Enjoy :) and also please give me feedback on it, thats the reason im reliesing this and depending on how much feedback I get I may be reliesing more scripts soon.
So, what do you think? 👍
* - Sir Asylum - Sep 6, 2012
Sir, this is amazing thank you.
i never knew this could be done in PHP.
* - Yorkiebar15 - Jan 3, 2013
I get "No injection point found :(" on http://vesselgallery.com/press/press.php?pressID=14' but it does work when I use a SQLi program. Any help?
* - daCloud ☁ - Jan 3, 2013
Wow, thanks for the share, this looks good. Also, Im PMing you Sir. 🤝
* - fjallis - Jan 3, 2013
Looks decent! Good job man. 🎉🎉🎉
* - 'Snorlax - Jan 3, 2013
Wow I gotta test this... Seems too good to be true :O
* - badbrains - Jan 3, 2013
What the fuck?
PHP Code
<?php
@$_data = "etc"
Why the shit are you doing that?
* - 0xStack - Jan 3, 2013
(Jan 3, 2013 11:06 AM)PeopleUnderTheStairs Wrote: What the fuck?
PHP Code
<?php
@$_data = "etc"
Why the shit are you doing that?
HEY MAN SOMETIMES SETTING STRINGS TO VARIABLES GOES WRONG, YOU KNOW. THE INTERPRETER JUST BLOWS UP.
* - CarrotMilk - Jan 3, 2013
Did you code this? I've seen the EXACT same script floating around other places. Admit now, or forever be flamed.
EDIT: LOL okay you're a cunt. Found the same script and all you've done is remove the comments at the bottom showing the author
Double EDIT: Old post is old. Whoops.
* - badbrains - Jan 3, 2013
(Jan 3, 2013 07:58 AM)Yorkiebar15 Wrote: I get "No injection point found :(" on http://vesselgallery.com/press/press.php?pressID=14' but it does work when I use a SQLi program. Any help?
Dude why are you trying to hack an art gallery?