Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- /*
- Bing Ip SQLi Scanner v2.0
- Coder: inj3ctor_m4
- */
- error_reporting(0);
- @set_time_limit(0);
- if(count($argv)<3)
- {
- echo"
- ____ ____ ___
- /\ _`\ __ /\ _`\ /\_ \
- \ \ \L\ \ /\_\ ___ __\ \,\L\_\ __ \//\ \
- \ \ _ <'\/\ \ /' _ `\ /'_ `\/_\__ \ /'__`\ \ \ \
- \ \ \L\ \\ \ \/\ \/\ \/\ \L\ \/\ \L\ \/\ \L\ \ \_\ \_
- \ \____/ \ \_\ \_\ \_\ \____ \ `\____\ \___, \/\____\
- \/___/ \/_/\/_/\/_/\/___L\ \/_____/\/___/\ \/____/
- /\____/ \ \_\
- \_/__/ \/_/
- \n";
- echo"\tUsage : php ".$_SERVER["PHP_SELF"]." [127.0.0.1] [dork] \n";
- exit;
- }
- echo"\n\tGreet'z To Moroccan Haxor'z & Mr.Evil\n\n";
- $ip = $argv[1];
- $dork = $argv[2];
- $proxy_page = urlencode('http://www.ip-adress.com/proxy_list/index.php');
- rangesqliscanner($ip,$dork);
- function rangesqliscanner($ip,$dork){
- $ip = explode('.',$ip);
- $ip = $ip[0].'.'.$ip[1].'.'.$ip[2].'.';
- for($i=0;$i <= 255;$i++){
- $Check = @fsockopen("".$ip.$i."", 80);
- if($Check)
- {
- echo "[+] Scanning -> ", $ip.$i, "";
- getproxy($proxy_page);
- $vpn=file("./vpn.txt");
- foreach($vpn as $proxy){
- countdomain($ip.$i,$proxy);
- }
- $bing = urlencode("ip:$ip$i $dork");
- for ($a = 1; $a <= 10 + 10; $a++)
- {
- $src = getsource("http://www.bing.com/search?q=$bing&first=$a");
- preg_match_all('/<h2><a href="(.*?)" h="/',$src,$matches);
- }
- $sites = array_unique($matches[1]);
- }
- foreach($sites as $site){
- $get = getsource("$site%27");
- if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch​_row()|SELECT * FROM|supplied argument is not a valid MySQL|Microsoft OLE DB Provider for ODBC Drivers error|Syntax error|Fatal error/i",$get)) {
- echo urldecode($site)." >> Infected\n";
- }
- else{
- echo urldecode("$site")."\n";
- }
- }
- }
- // By Mr.Evil HHHHHHHHHHHH
- echo "\n\nGood Luck With Your Pentesting. :)\n";
- }
- function countdomain($ip,$proxy){
- $ch = curl_init ("http://domains.yougetsignal.com/domains.php");
- curl_setopt ($ch, CURLOPT_POST, true);
- curl_setopt ($ch, CURLOPT_POSTFIELDS, "remoteAddress={$ip}");
- if ($proxy)
- curl_setopt ($ch, CURLOPT_PROXY, $proxy);
- curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
- $postResult = curl_exec ($ch);
- curl_close ($ch);
- if(preg_match_all("#\"domainCount\":\"(.*?)\"#",$postResult,$domain)) {
- $nigga = $domain[1];
- }
- foreach ($nigga as $domains) {
- echo "\n [+] Total Websites: $domains\n\n";
- }
- }
- function getproxy($proxy_page){
- $ch = curl_init();
- curl_setopt($ch,CURLOPT_URL,'http://proxy-list.org/english/extractor.php');
- curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
- curl_setopt($ch,CURLOPT_POST,TRUE);
- curl_setopt($ch,CURLOPT_POSTFIELDS,'url='.$proxy_page);
- $return = curl_exec($ch);
- preg_match_all('(<div class="input-wrap input-wrap-long"><textarea name="rawtext">(.*)<\/textarea><\/div>)sUi',$return,$proxys);
- $proxys = explode("\n",$proxys[1][0]);
- foreach($proxys as $proxy){
- $save = fopen('vpn.txt','ab');
- fwrite($save,"$proxy");
- fclose($save);
- }
- }
- function getsource($site){
- if (function_exists('curl_init')) {
- $ch = @curl_init($site);
- @curl_setopt($ch, CURLOPT_HEADER, FALSE);
- @curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
- @curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
- @curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
- @curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
- $source = @curl_exec($ch);
- @curl_close($ch);
- return $source;
- }
- else {
- return @file_get_contents($site);
- }
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment