Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ============================================================================================================
- CODIGO ACA ABAJO, ESTE TOOLS PYTHON FUE ECHO POR MI COMENZANDO A APRENDER ESTE TIPO DE PROGRAMACION ESTE ES UN SCANNER SQL LO CUAL TAMBIEN PUEDE SER MODIFICADO PARA DISTINTOS TIPOS DE BUSQUEDAS EN UNA PAGINA WEB.
- ============================================================================================================
- #!/usr/bin/python
- #
- #Creado por YeiZeta
- #Pagina www.medianfire.es.tl
- #E-mail [email protected]
- #
- #
- import urllib
- import httplib
- import os
- import sys
- if os.name == "nt":
- os.system("cls")
- os.system("color 4f")
- else:
- os.system("clear")
- def usage():
- print """
- ("`-''-/").___..--''"`-._-----------------------
- `6_ 6 ) `-. ( ).`-.__.`)Pantera Scanner-
- (_Y_.)' ._ ) `._ `. ``-..-'--------------------
- _..`--'_..-_/ /--'_.' ,'By Yei zeta -
- (il),-'' (li),' ((!.-'------------------------------
- """
- def scanner(url):
- try:
- page = urllib.urlopen(url).read()
- except:
- print "[-]error al conectar servidor\n"
- return(0)
- sqls = ("mysql_result(): supplied argument is not a valid MySQL result
- resource in","[Microsoft][ODBC SQL Server Driver][SQL Server]","Warning:
- ociexecute","Warning: pq_query[function.pg-query]:")
- i=0
- page = str(page.lower())
- while i<len(sqls):
- sql = str(sqls[i]).lower()
- if page.find(sql[i]) == -1:
- check=0
- else:
- check=1
- i+=1
- if check == 0:
- print "[-]"+url+" <No vulnerablel>"
- else:
- print "[+]"+url+" <Vulnerable>"
- def main(args):
- if len(args)!=2:
- usage()
- print "\t\t[-]Modo de Uso: %s <File>\n" % sys.argv[0]
- print "\t\t[-]Exemplo: %s Site.txt\n" % sys.argv[0]
- sys.exit(0)
- usage()
- try:
- f = open(str(sys.argv[1]),"r")
- urls = f.readlines()
- except:
- print "[+]Errror Al Abrir este archivo "+sys.argv[1]+""
- return(-1)
- f.close()
- i=0
- while i<len(urls):
- if urls[i].find("http://") == -1:
- urls[i] = "http://" + urls[i]
- urls[i] = urls[i].replace("\n","")
- a = scanner(urls[i]+"'")
- i+=1
- if 0xfffffff > 0xffffff:
- main(sys.argv)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement