#Скрипт закачивает фотки с xuk.ru ;)
use LWP;
use strict;

my $n = shift;
my $html = '';
if(defined($n))
{
	$html = "$n.html";
	$n = " - $n";
}
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst)=localtime(time);
my $newdir = sprintf "%02u-%02u-%04u$n",$mday,$mon+1,$year+1900;
mkdir $newdir || die 'cannot create directory';
chdir $newdir;

my $ua = LWP::UserAgent->new;
my $res = $ua->get("http://xuk.ru/$html");
die 'cannot connect' unless $res->is_success;
my @main = split /\x0D\x0A/, $res->content;
my @girl_url;

foreach (@main)
{
	if(/vid-1\.html/)
	{
		push @girl_url, $& if /http:\/\/xuk\.ru\/.*vid-1\.html/;
	}

}

foreach (@girl_url)
{
	my $folder = substr $&, 1, -11 if /\/[\w-]*\/vid-1.html/;
	print "FOLDER: $folder\n";
	mkdir $folder || die 'cannot create directory';
	$res = $ua->get($_);
	unless($res->is_success)
	{
		warn "cannot connect\n";
		next
	}
	my @vid = split /\x0D\x0A/, $res->content;
	my @foto_url;
	foreach(@vid)
	{
		if(/<img alt="Эротика/)
		{
			push @foto_url, $& if /http:\/\/pic\.xuk\.ru\/files.*\.jpg/;
		}
	}
	foreach (@foto_url)
	{
		my $filename = substr $&, 1 if /\/[\w-\(\)\.]*\.jpg/;
		print "\tFILE: $filename\n";
		$ua->get($_, ':content_file' => "$folder/$filename");
	}
}

chdir '..';

#!/usr/bin/python

from sgmllib import SGMLParser
import sys, urllib, re, urllib2, sets

class URLLister(SGMLParser):
	def reset(self):
		SGMLParser.reset(self)
		self.urls = []

	def start_a(self, attrs):
		href = [v for k, v in attrs if k=='href']
		if href:
			self.urls.extend(href)
 
def test(host): 
	source = urllib2.urlopen(host+sys.argv[2]).read() 
	if re.search("Warning", source) != None: 
		print "\n\t[!] SQL:",host+sys.argv[2]
	if re.search("mysql_fetch_array()", source) != None:
		print "\t[!] Found: mysql_fetch_array() error\n"
	if re.search("You have an error in your SQL syntax", source) != None:
		print "\t[!] Found: sql syntax error\n"
		
		
print "\n\t   SQLtest v1.2"
print "\t--------------------------------------------\n"
			
if len(sys.argv) != 3:
	print "Usage : ./sqltest.py <list of sites> <payload (-1, 999999)>"
	print "Eg: ./sqltest.py sites.txt \"-1\"\n"
	sys.exit(1)
	
try:
	sites = open(sys.argv[1], "r").readlines()
except(IOError): 
  	print "Error: Check your site list path\n"
  	sys.exit(1)
	
print "[+] Loaded:",len(sites),"sites"
print "[+] Payload:",sys.argv[2]

for site in sites:
	site = site.replace("\n","")
	if site.find("http://") != -1:
		site = site.replace("http://","")
		site = "http://"+site.rsplit("/",1)[0]
	if site.find("https://") != -1:
		site = site.replace("https://","")
		site = "https://"+site.rsplit("/",1)[0]
	print "\n[+] Collecting:",site
	try:
		usock = urllib.urlopen(site)
		parser = URLLister()
		parser.feed(usock.read())
		parser.close()
		usock.close()
		if len(parser.urls) >=1:
			urls2 = []
			for url in parser.urls: 
				if url.find("://") == -1:
					if url[0] == "/":
						url = site+url
					else:
						url = site+"/"+url
				if url.count("=") >= 2:
					for x in xrange(url.count("=")):
						urls2.append(url.rsplit("=",x+1)[0]+"=")
				if url.find("=") != -1:
					if url[0] == "/":
						urls2.append(site+url.split("=",1)[0]+"=")
					else:
						urls2.append(url.split("=",1)[0]+"=")
			urls2 = list(sets.Set(urls2))
			print "[+] Links Found:",len(urls2),"\n"
		else:
			urls2 = []
			print "[-] Error Connecting"
		for url in urls2:
			print "[+] Testing:",url+sys.argv[2]
			try:
				test(url)
			except:
				pass
	except:
		pass

print "\n[-] Done\n"