Spoof Call and Spoof SMS set any caller ◆ 🏆 Earn HF Awards through Goals ◆ Private Crypter - Unique Private Stubs ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › Script that finds vulnerable sites and outputs urls to file?

New Reply 

Script that finds vulnerable sites and outputs urls to file?
DoxM3
DoxM3 Offline
[user@HF:]
*
Registered
Posts:
286
Threads:
75
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 29, 2017 05:49 PM
All that would be needed is an option to input a dork and it should go to google, input inurl:*dork here* and go to every url, add a ', and search the webpage that's loaded after inputting the ' for sql and if sql is a word on the page it be output to a file.

At least that's how I'd think it should work, I'm sure there is something like this around right? I tried googling but didn't find much.. I'm sure it could be done wit imacros or something right? I know a little python and c but I doubt that would be useful when it comes to something like this.
pomwtin
pomwtin Offline
Hammertime!
***
HF Ub3r
Posts:
3,185
Threads:
26
Credibility:
000
Popularity:
431
βytes:
β 0
Game XP:
29
Apr 29, 2017 05:55 PM (This post was last modified: Apr 29, 2017 05:56 PM by pomwtin.)
(Apr 29, 2017 05:49 PM)DoxM3 Wrote:  All that would be needed is an option to input a dork and it should go to google, input inurl:*dork here* and go to every url, add a ', and search the webpage that's loaded after inputting the ' for sql and if sql is a word on the page it be output to a file.

At least that's how I'd think it should work, I'm sure there is something like this around right? I tried googling but didn't find much.. I'm sure it could be done wit imacros or something right? I know a little python and c but I doubt that would be useful when it comes to something like this.

Python and curl (pycurl) would do just fine. Fairly easy to implement
9x HD5970
2X GTX 980Ti
GTX 980
GTX 1060
R9 390

Cracking your hashes
Triops
Triops Away
Contact me for doxing service
***
HF l33t
Posts:
704
Threads:
153
Credibility:
000
Popularity:
15
βytes:
β 0
Game XP:
0
Apr 29, 2017 05:59 PM
(Apr 29, 2017 05:55 PM)pomwtin Wrote:  Python and curl (pycurl) would do just fine. Fairly easy to implement

Any idea if I could make a script in Python that'd exploit websites that have an XPath Error Based vulnerability?
[Image: ZSTNWza.jpg]

DoxM3
DoxM3 Offline
[user@HF:]
*
Registered
Posts:
286
Threads:
75
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 30, 2017 11:54 AM
(Apr 29, 2017 05:55 PM)pomwtin Wrote:  Python and curl (pycurl) would do just fine. Fairly easy to implement

PM'd you but I don't really know how to do things like this I just know functions and general stuff with python.
Clutch
Clutch Away
Oldheads Unite
***
HF Ub3r
Posts:
1,269
Threads:
175
Credibility:
000
Popularity:
14
βytes:
β 0
Game XP:
0
Apr 30, 2017 12:42 PM
Just use Sqlmap. It lets you input a Google dork instead of a URL.

DoxM3
DoxM3 Offline
[user@HF:]
*
Registered
Posts:
286
Threads:
75
Credibility:
100
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 30, 2017 12:44 PM
(Apr 30, 2017 12:42 PM)Clutch Wrote:  Just use Sqlmap. It lets you input a Google dork instead of a URL.

I didn't know that was an option on SQLMap, thanks, man!
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Klauxy18Feb 3, 2023 11:07 AM 1 173 Feb 3, 2023 11:07 AM
Last Post: InspectorGadget
by rko4allOct 11, 2020 03:23 AM 5 249 Oct 11, 2020 03:23 AM
Last Post: niqscann
by Danger0Jul 28, 2020 02:38 AM 0 214 Jul 28, 2020 02:38 AM
Last Post: Danger0