Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
SQLbit - Just Another Script For Automatize Boolean-Based Blind SQL Injections
http://www.kitploit.com/2021/12/sqlbit-just-another-script-for.html
A script for automatize boolean-based blind SQL injections.
Works with SQLite (https://www.kitploit.com/search/label/SQLite) at least, supports using cookies.
It uses bitwise comparisons with multithreading (https://www.kitploit.com/search/label/Multithreading) to find cell values instead of binary (https://www.kitploit.com/search/label/Binary) search, which is more efficient.It's able to:Search cell values by columns in a tableSearch characters count in a cells by columns in a tableSearch rows count in a tableThe search algorithm is shown below.
Knowing the name of its column ('sqlite_master' by default in sqlite, for example) and the column name of it ('name' in sqlite) you can find values ​​of every cell in every row. And the fastest algorithm for this is checking the binary values of every character in every cell, which can be perform using multiple threads. Considering this, we can send only 7 requests to get the standard 7-bit letter, and using 1000 threads, we get ~142 letters per moment (it's also worth keeping in mind requests to get the length of a cell value).
 The number of bits need to compare (7 by default for ASCII) and the number of threads can be specified as input data.Installinggit clone https://github.com/Sunlight-Rim/sqlbit.git
pip3 install -r requirements.txt
UsageIt does not accept command line (https://www.kitploit.com/search/label/Command%20Line) arguments, so you can specify data in the config file or at runtime program.python sqlbit.py
 Note: please, use it only for your own servers or for the servers of those owners with whom you have agreed in advance.

Download SQLbit (https://github.com/Sunlight-Rim/SQLbit)