descargalo
Bank_of_America.txt
ebay.txt
http://rapidshare.com/files/219400437/ebay.txt
Listado de diccionarios: http://www.theargon.com/achilles/wordlists/
Pack de diccionarios (Rar): http://rapidshare.com/files/217148810/wordlists_theargonlists_mirror.rar
Md5Sum: 8bb073319e28869c3b06c97ad03b83b4
sniffer + Panal de COntrol+ base64_encoder
Es casi Perfecto..
pruebenlo Y Saquen cookie
Mas despues le voy a enseñar el bug de hotmail para que saquen cookie y roben mas facil y rapido
http://rapidshare.com/files/219400435/Cookie_Sniffer.zip
Disculpen POr portejer Algunos datos
This little program makes it possible to seek site
vulnerable by the injection sql
Multilingual Google research (11)
Engine (5)
Project: Dork Sql Injection Search by Jonathan59
Open Edition! Vb6
thank you for dork;
http://forum.darkc0de.com/index.php?action=vtopic&forum=16
Download Link
zshare
......
http://www.zshare.net/download/531434099ad5d480/
rapidshare.de
......
http://rapidshare.de/files/41194125/Dork_sql_injection_Search.rar.html
1. Added “Get from all domains”, included in the app is domain.txt w/c contains common domains, if you want to search for all domains just check this and click scan sites, it will give a lot more results than before, included also is domain2.txt if you want to use all domains, just rename to domain.txt
2. SQLi extensive - will add more parameter comma, parenthesis, double qoute, qoute, to generate errors, it will make scanning longer
3. SQLi cond - its page comparison, program will get results from “and 1=0? and “and 1=1? compares them if there are changes, also for strings “‘ and 1=0/*” and “‘ and 1=1/*”, its not accurate 50/50 because of sites with ad’s w/c changes html source everytime you visit the page
4. XSS checking - now this is 98% accurate, its a wrapper of internet explorer, eliminating false positives, its slow so i recommend you set a timeout in ie http://www.google.com/search?q=timeout+ ... =firefox-a <– some guides, if you dont it sometimes stops at the middle (default timeout in ie is 10min lol), also disable IE images at advanced options, this will make checking faster.
5. LFI scan - added sa simple lfi scan, its error based, if it detects an file inclusion error, its added to the list, it appends “/etc/passwd? at the end, its not the correct path but a sample, you can use lfi fuzzer to check directories (im planning making one as perl avaiable fuzzer dont ~censored~ work)
6. RFI scan - will included a simple textfile and check contents, RFI is very few right now but with good dork you will find em, its 98% accurate, 2% is false positives…the file is included but not parsed
to do: multiple dork scan
enjoy
Code:
**10/16/2008**
fixed a multhreading issue, now it will test faster with specified threads
added different google countries to search for
added additional parameter to force errors
**10/12/2008**
i got tired of filtering sites so i made one 
its error based, the probability of sql injection is good but may give false positives, still working on other methods to detect (eg 1=0/1=1 + union + etc..)
support mysql,sqlserver,mcaccess,cfm..
it uses blackle so you can get 5000 test sites, after that use a proxy
multithreaded
Download mu:
Code:
http://www.megaupload.com/?d=YG806YZD
Download maxishare:
Code:
http://www.maxishare.net/en/file/11521/exploitscanner-rar.html
Priamos Project - SQL Injector and Scanner
PRIAMOS is a powerful SQL Injector & Scanner
http://130th.net/
www.omnis.com
Bluehost.com ,
globat.com
aplushosting.com
crazyhostguy.com
www.aplus.net
www.name.com
http://www.plughost.com/
http://inmotionhosting.com
http://www.3essentials.com
http://www.accuwebhosting.com
http://www.qualityhostonline.com
http://www.cyberland-usa.com
http://www.serverway.net
http://www.stpwebhosting.com
http://www.arhoster.com
http://www.siteflip.com
http://www.pronethosting.net
http://www.jatolhost.com
http://www.lowbudgethost.com
http://www.p4host.com
http://cirtexhosting.com
http://www.bigbluehost.com
http://www.ultrasurge.com
http://www.mymarkdown.com/
http ://ipowwerweb.com
http:// site5.com
http://hostingcompanies.com/
http://www.tristarhost.com/
http://www.timehost.net/
http://www.lunarpages.com/solutions.php
http://www.tier1host.net/
http://www.triple8.net/hosting.htm
http://www.tollon.net/hosting/nt-web-hosting.shtml
http://www.fatcow.com/fatcow/index.bml
http://www.networxhosting.com/
Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Quisque sed felis. Aliquam sit amet felis. Mauris sem
Entradas
