1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
##
# This file is part of WhatWeb and may be subject to
# redistribution and commercial restrictions. Please see the WhatWeb
# web site for more information on licensing and terms of use.
# http://www.morningstarsecurity.com/research/whatweb
##
Plugin.define "MySqlDumper" do
author "Brendan Coles <bcoles@gmail.com>" # 2011-05-12
version "0.1"
description "MySQLDumper is a free PHP/Perl script to backup your important MySQL-Data safe and secure and restore them in the case of an emergency. - Homepage: http://www.mysqldumper.net/"
# Google results as at 2011-05-12 #
# 102 for inurl:sql_statement inurl:sql.php intitle:MySqlDumper
# 25 for inurl:mysqldumper/sql.php
# ShodanHQ results as at 2011-05-12 #
# 5 for MySQLDumper
# Dorks #
dorks [
'inurl:sql_statement inurl:sql.php intitle:MySqlDumper'
]
# Examples #
examples %w|
www.njoftime.com/mysqldumper/sql.php
s294746524.onlinehome.info/mysqldumper/sql.php
usthb-dz.org/mysqldumper/sql.php
tvf.22web.net/mysqldumper/sql.php
giakienphatcafe.com/mysqldumper/sql.php
www.ruediger-sielaff.de/mysqldumper/sql.php
canpolat.wkhost.net/mysqldumper/sql.php
fatwarez.org/msd/sql.php
ibs-informatik.dnsalias.net/mysqldumper/sql.php
dishpointer.techno-com.de/MySQLDumper/sql.php
www.manutd-news.com/Hi/sql.php
212.41.212.38
80.69.47.37
|
# Matches #
matches [
# Select HTML
{ :text=>'<select class="SQLCombo" name="tablecombo" onchange="this.form.sqltextarea.value=this.options[this.selectedIndex].value;this.form.execsql.click();">' },
# Warning HTML
{ :text=>'align="center">The execution of SQL Statements can manipulate data. TAKE CARE! The Authors don\'t accept any liability for damaged or lost data.</div>' },
# Select Database link
{ :text=>'<a title="Select Database / Datebase functions / Import - Export " href="sql.php?db=&dbid=0&context=3' },
]
# Passive #
def passive
m=[]
# MySQLDumper Cookie
m << { :name=>"MySQLDumper Cookie" } if @headers["set-cookie"] =~ /MySQLDumper=[a-z\d]{16,32}/
# WWW-Authenticate realm
m << { :name=>"WWW-Authenticate realm" } if @headers["www-authenticate"] =~ /^Basic realm="MySQLDumper"$/
# Return passive matches
m
end
end
|
