Roman/HackingScripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Padbuster https proxy, util regex assertions, sql.php cli mode

Browse Source
This commit is contained in:
Roman Hergenreder
2023-10-27 20:45:51 +02:00
parent afb27bd33d
commit 2048702cf7
3 changed files with 39 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
sql.php
View File

@@ -8,12 +8,14 @@ if (php_sapi_name() === "cli") {
$database = $argv[3] ?? null;
$host = $argv[4] ?? "localhost";
$query = $argv[5] ?? "SELECT @@version";
$dump_all = $query === "mysqldump";
} else {
$username = $_REQUEST["username"];
$password = $_REQUEST["password"];
$database = (isset($_REQUEST["database"]) ? $_REQUEST["database"] : null);
$host = (isset($_REQUEST["host"]) ? $_REQUEST["host"] : "localhost");
$query = (isset($_REQUEST["query"]) ? $_REQUEST["query"] : "SELECT @@version");
$query = (isset($_REQUEST["query"]) ? $_REQUEST["query"] : "SELECT @@version");
$dump_all = isset($_REQUEST["dumpAll"]);
}
$link = mysqli_connect($host, $username, $password, $database);
@@ -21,9 +23,27 @@ if (!$link) {
die("Error connecting to mysql: " . mysqli_connect_error() . " (" . mysqli_connect_errno() . ")");
}
$res = mysqli_query($link, $query);
if (!$res) {
die("Error executing query: " . mysqli_error($link));
if ($dump_all) {
$res = mysqli_query($link, "SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA='$database'");
$tables = array();
while ($row = $res->fetch_assoc()) {
$tables[] = $row["TABLE_NAME"];
}
foreach ($tables as $tableName) {
echo "-- DATA FOR TABLE: tableName\n";
$res = mysqli_query($link, "SELECT * FROM $tableName");
while ($row = $res->fetch_assoc()) {
var_dump($row);
}
echo "-- --------------------------\n\n";
}
} else {
$res = mysqli_query($link, $query);
if (!$res) {
die("Error executing query: " . mysqli_error($link));
}
}
while ($row = $res->fetch_assoc()) {