+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [explained] ✩ Online SQLi Scanner ✩ [how it works|what it does][UPDATED] (/showthread.php?tid=844659)
Pages: Pages
1
2
[explained] ✩ Online SQLi Scanner ✩ [how it works|what it does][UPDATED] - hack_addicted.pt - Nov 24, 2010
✩hack_addicted.pt SQLi Scanner ✩
--Status:[online]--
I HIGHLY recommend you to use this SQLi Scanner, and not .exe tools!
Side Note: Better dork = more results! Keep that in mind!
Note: This scanner is coded by r3m1ck, a very famous Indonesian Coder, i just modded it and uploaded it.
--
✩Online SQLi Scanner ✩
>Click here to Access<
--
✩Explained: Online SQLi Scanner ✩
It does a shearch in google, using specific words called dorks
Imagine you put this in google:
inurl:php?=id+gov
and you get a list of results: 6.980.000 results in (0,22 secs)
now to check the ones vulnerable would take you for ever if you check one by one manually, so what this script does, it puts a ' at the end of the url and shearch for specific words that would be the ones you see when you check it manually.
example (script working):
google shearch result:
http://www.thurrock.gov.uk/libraries/libinfo/content.php?page=library
Code
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Thurrock Council | Library Information | Library Information</title>....turns to:
http://www.thurrock.gov.uk/libraries/libinfo/content.php?page='library
Code
<p><b>Error: </b>Could not query the database.</p><p>Please try again later.</p>
[b]<!--[/b] 1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'library'
LIMIT 1' at line 22 -->So the script knows that the website is vuln.
And displays the result.
Any question fell free to ask. 👍
* - Willem - Nov 24, 2010
Cool you got a new link :D
* - hack_addicted.pt - Nov 24, 2010
(Nov 24, 2010 08:34 AM)Willem Wrote: Cool you got a new link :D
lool yeah, uploaded it to another owned domain xD
* - lost_firing_pin - Nov 24, 2010
Edited, just found new link. Massive thumbs up. Sweet sqli scanner, I just learned how to use it last night, stayed up all night last night scanning servers. or is there a place were I can get the code for this? I'd host it myself.
* - putr45 - Nov 25, 2010
What is the function of sql anyway... ? i am noob.. :)
* - z0si - Nov 26, 2010
Source please.
Also...
This is not new... Theres lots of online SQLi scanners...
http://t3mp3.isgreat.org/scanner.php/
http://revtan.site40.net/scanner/
Does it bypass the Google block? If not than it's no better.
* - hack_addicted.pt - Nov 28, 2010
✩hack_addicted.pt SQLi Scanner ✩
--Status:[online (NEVER down again)]--
https://hackforums.net/showthread.php?tid=855630
--Status:[online (NEVER down again)]--
https://hackforums.net/showthread.php?tid=855630
* - RollinThatDice - Nov 28, 2010
Wow, I tried for ten minutes to use the link from the original post and it didn't work. I finally realized after a while the link was the last post.
* - h1t4k3 - Dec 5, 2010
Good job brother..it's work
:D
* - GiGz - Dec 6, 2010
W0W amazing shit dude nice share m8 ty!
* - Xiu - Dec 18, 2010
hi man,
please send the source code by pm
pm is not active for me
* - hack_addicted.pt - Dec 18, 2010
(Dec 18, 2010 06:16 PM)Xiu Wrote: hi man,
please send the source code by pm
pm is not active for me
lol stupist post i have seen today 🤣🤣🤣
* - h00k - Dec 23, 2010
Could anyone share a link to a decent sqli google scanner source code please. Would be much appreciated, was hoping to learn some php and have a go modifying it. Thanks
Great work hack_addicted.pt , thanks for the share !!!
* - Error001 - Feb 2, 2011
SO COOL
but...
when i get the results of some site....
how can i use that result ???
explane me pls..i'm noob...
* - Vertu - Feb 3, 2011
Link is broken , please fix it, it would be great tool...