{"id":522,"date":"2020-09-02T11:34:32","date_gmt":"2020-09-02T03:34:32","guid":{"rendered":"https:\/\/byy3.com\/?p=522"},"modified":"2020-09-02T11:34:32","modified_gmt":"2020-09-02T03:34:32","slug":"python%e5%9f%ba%e4%ba%8e%e6%90%9c%e7%b4%a2%e5%bc%95%e6%93%8e%e6%89%b9%e9%87%8fsql%e6%90%9c%e7%b4%a2%e5%92%8c%e6%b3%a8%e5%85%a5","status":"publish","type":"post","link":"https:\/\/byy3.com\/?p=522","title":{"rendered":"python\u57fa\u4e8e\u641c\u7d22\u5f15\u64ce\u6279\u91cfsql\u641c\u7d22\u548c\u6ce8\u5165"},"content":{"rendered":"<p>https:\/\/github.com\/Shadowshusky\/sqlivulscan.<\/p>\n<p>\u63a8\u8350\u547d\u4ee4<\/p>\n<pre><span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">d<\/span> <span class=\"pl-s\">\"inurl:index.php?id=\"<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">e<\/span> \u67e5\u770b\u652f\u6301\u7684\u641c\u7d22\u5f15\u64ce\r\n*** \u5f3a\u70c8\u5efa\u8bae<span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">d<\/span> <span class=\"pl-s\">\"inurl:index.php?id=\"<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">e<\/span> bing \u5f00\u59cb\u6316\u6398\u6f0f\u6d1e\u5730\u5740<\/pre>\n<h1>SQLiv<\/h1>\n<h3><a id=\"user-content-massive-sql-injection-scanner\" class=\"anchor\" href=\"https:\/\/byy3.com\/go\/?url=https:\/\/github.com\/Shadowshusky\/sqlivulscan.#massive-sql-injection-scanner\" aria-hidden=\"true\" rel=\"nofollow\" ><\/a>Massive SQL injection scanner<\/h3>\n<h5><a id=\"user-content-old-project-sqlivulscan\" class=\"anchor\" href=\"https:\/\/byy3.com\/go\/?url=https:\/\/github.com\/Shadowshusky\/sqlivulscan.#old-project-sqlivulscan\" aria-hidden=\"true\" rel=\"nofollow\" ><\/a>old project (<a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/github.com\/Hadesy2k\/sqlivulscan\/tree\/old\" rel=\"nofollow\" >sqlivulscan<\/a>)<\/h5>\n<p><strong>Features<\/strong><\/p>\n<ol>\n<li>multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo<\/li>\n<li>targetted scanning by providing specific domain (with crawling)<\/li>\n<li>reverse domain scanning<\/li>\n<\/ol>\n<blockquote><p>both SQLi scanning and domain info checking are done in multiprocessing<br \/>\nso the script is super fast at scanning many urls<\/p><\/blockquote>\n<blockquote><p>quick tutorial &amp; screenshots are shown at the bottom<br \/>\nproject contribution tips at the bottom<\/p><\/blockquote>\n<hr \/>\n<p><strong>Installation<\/strong><\/p>\n<ol>\n<li>git clone\u00a0<a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/github.com\/Hadesy2k\/sqlivulscan.git\" rel=\"nofollow\" >https:\/\/github.com\/Hadesy2k\/sqlivulscan.git<\/a><\/li>\n<li>sudo python2 setup.py -i<\/li>\n<\/ol>\n<blockquote><p>Dependencies<\/p>\n<ul>\n<li><a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/pypi.python.org\/pypi\/bs4\" rel=\"nofollow\">bs4<\/a><\/li>\n<li><a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/pypi.python.org\/pypi\/termcolor\" rel=\"nofollow\">termcolor<\/a><\/li>\n<li><a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/pypi.python.org\/pypi\/google\" rel=\"nofollow\">google<\/a><\/li>\n<\/ul>\n<\/blockquote>\n<p><strong>Pre-installed Systems<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/byy3.com\/go\/?url=https:\/\/blackarch.org\/scanner.html\" rel=\"nofollow\">BlackArch Linux<\/a>\u00a0<a href=\"https:\/\/raw.githubusercontent.com\/BlackArch\/blackarch-artwork\/master\/logo\/logo-38-49.png\" data-fancybox=\"gallery\" target=\"_blank\" rel=\"noopener noreferrer\" rel=\"nofollow\" ><img decoding=\"async\" data-original=\"https:\/\/raw.githubusercontent.com\/BlackArch\/blackarch-artwork\/master\/logo\/logo-38-49.png\" src=\"https:\/\/byy3.com\/wp-content\/themes\/MNews%20V2.4\/images\/post-loading.gif\" title=\"python\u57fa\u4e8e\u641c\u7d22\u5f15\u64ce\u6279\u91cfsql\u641c\u7d22\u548c\u6ce8\u5165\u63d2\u56fe\" alt=\"python\u57fa\u4e8e\u641c\u7d22\u5f15\u64ce\u6279\u91cfsql\u641c\u7d22\u548c\u6ce8\u5165\u63d2\u56fe\" \/><\/a><\/li>\n<\/ul>\n<hr \/>\n<h3><a id=\"user-content-quick-tutorial\" class=\"anchor\" href=\"https:\/\/byy3.com\/go\/?url=https:\/\/github.com\/Shadowshusky\/sqlivulscan.#quick-tutorial\" aria-hidden=\"true\" rel=\"nofollow\" ><\/a>Quick Tutorial<\/h3>\n<p><strong>1. Multiple domain scanning with SQLi dork<\/strong><\/p>\n<ul>\n<li>it simply search multiple websites from given dork and scan the results one by one<\/li>\n<\/ul>\n<div class=\"highlight highlight-source-python\">\n<pre><span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">d<\/span> <span class=\"pl-c1\">&lt;<\/span><span class=\"pl-v\">SQLI<\/span> <span class=\"pl-v\">DORK<\/span><span class=\"pl-c1\">&gt;<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">e<\/span> <span class=\"pl-c1\">&lt;<\/span><span class=\"pl-v\">SEARCH<\/span> <span class=\"pl-v\">ENGINE<\/span><span class=\"pl-c1\">&gt;<\/span> \r\n<span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">d<\/span> <span class=\"pl-s\">\"inurl:index.php?id=\"<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">e<\/span> <span class=\"pl-s1\">google<\/span><\/pre>\n<\/div>\n<p><strong>2. Targetted scanning<\/strong><\/p>\n<ul>\n<li>can provide only domain name or specifc url with query params<\/li>\n<li>if only domain name is provided, it will crawl and get urls with query<\/li>\n<li>then scan the urls one by one<\/li>\n<\/ul>\n<div class=\"highlight highlight-source-python\">\n<pre><span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">t<\/span> <span class=\"pl-c1\">&lt;<\/span><span class=\"pl-v\">URL<\/span><span class=\"pl-c1\">&gt;<\/span> \r\n<span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">t<\/span> <span class=\"pl-s1\">www<\/span>.<span class=\"pl-s1\">example<\/span>.<span class=\"pl-s1\">com<\/span> \r\n<span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">t<\/span> <span class=\"pl-s1\">www<\/span>.<span class=\"pl-s1\">example<\/span>.<span class=\"pl-s1\">com<\/span><span class=\"pl-c1\">\/<\/span><span class=\"pl-s1\">index<\/span>.<span class=\"pl-s1\">php<\/span>?<span class=\"pl-s1\">id<\/span><span class=\"pl-c1\">=<\/span><span class=\"pl-c1\">1<\/span><\/pre>\n<\/div>\n<p><strong>3. Reverse domain and scanning<\/strong><\/p>\n<ul>\n<li>do reverse domain and look for websites that hosted on same server as target url<\/li>\n<\/ul>\n<div class=\"highlight highlight-source-python\">\n<pre><span class=\"pl-s1\">python<\/span> <span class=\"pl-s1\">sqliv<\/span>.<span class=\"pl-s1\">py<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">t<\/span> <span class=\"pl-c1\">&lt;<\/span><span class=\"pl-v\">URL<\/span><span class=\"pl-c1\">&gt;<\/span> <span class=\"pl-c1\">-<\/span><span class=\"pl-s1\">r<\/span><\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>https:\/\/github.com\/Shadowshusky\/sqlivulscan. \u63a8\u8350\u547d\u4ee4 pytho [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-522","post","type-post","status-publish","format-standard","hentry","category-net-security"],"_links":{"self":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/522","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=522"}],"version-history":[{"count":0,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/522\/revisions"}],"wp:attachment":[{"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=522"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=522"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=522"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}