Jumat, 30 September 2011

SQLI scanner source code (vb 6)

source code dasar untuk membuat SQLI scanner adalah sebagai berikut:
------------------------------------------------------------------------------------
Private Sub Command1_Click()
Dim StatVar As String
If Text1.Text = "" Then
Label1 = "Please insert the URL"
Else: If Inet1.StillExecuting Then Exit Sub
Label1 = "Requesting SQL Injection Parameter " & Text1.Text
DoEvents
Inet1.URL = Text1.Text + "'"
StatVar = Inet1.OpenURL

DoEvents
If InStr(StatVar, "Microsoft OLE DB Provider for ODBC Drivers") Or InStr(StatVar, "You have an error in your SQL syntax") Or InStr(StatVar, "mysql_num_rows()") Or InStr(StatVar, "Incorrect syntax") Or InStr(StatVar, "Warning: Fatal error") Or InStr(StatVar, "mysql_fetch_array()") Or InStr(StatVar, "mysql_") Then
result.AddItem (Text1.Text + " " + "Is Vulnurable")
ElseIf InStr(StatVar, "Not Found") Then
result.AddItem (Text1.Text + " : " + "Can`t Inject the target, the PATH not found")
Else
result.AddItem (Text1.Text + " : " + "Not Vulnurable")
End If
End If
Text1.SetFocus
Text1.SelStart = 0
Text1.SelStart = Len(Text1)
End Sub
------------------------------------------------------------------------------------
sedangkan komponen yang digunakan/dibutuhkan :

-= sebuah textbox . (text1)
-= sebuah Listbox (result)
-= sebuah commandbutton (Command1)
-= sebuah Label (Label1)

sumber: forum.xcode.or.id (poni)

0 komentar:

Posting Komentar

sedikit komentar anda sangat berarti buat saya. ;)