Update

Author: Bitwise-01

lib/browser.py

@@ -17,9 +17,8 @@ def __init__(self, link):
         self.is_attempted = False
 
     def get_content(self):
-        url = self.link + '\''
         try:
-            return requests.get(url).text
+            return requests.get(self.link + '*').text.lower()
         except:
             pass
 
@@ -30,7 +29,7 @@ def attempt(self):
         if content:
             self.is_attempted = True
 
-            if 'Invalid SQL' in content or 'error' in content:
+            if 'sql' in content and 'error' in content and 'at line' in content:
                 self.is_vulner = True
 
         self.is_active = False

lib/search.py

@@ -1,43 +1,90 @@
-# Date: 01/02/2019
-# Author: Mohamed
-# Description: Search for links
 
-import requests
+
+import threading
 from queue import Queue
-from bs4 import BeautifulSoup as bs
+from requests_html import HTMLSession
+
+
+class Search:
 
+    base_url = 'https://bing.com'
+    parameters = '/search?q={}'
 
-class Search(object):
+    def __init__(self, query):
+        self.query = query
 
-    def __init__(self, dork):
         self.is_alive = True
+        self.is_searching = True
+
         self.links = Queue()
-        self.url = 'http://www.search-results.com/web?q={0}&page='.format(dork)
+
+        self.lock = threading.RLock()
+
+    def next_page(self, html):
+        try:
+            a = html.find('.b_pag', first=True).find('.b_widePag')
+            return self.base_url + a[-1].attrs['href']
+        except:
+            pass
+
+    def is_valid(self, link):
+
+        if not '=' in link:
+            return False
+
+        return True
 
     def find_links(self):
-        page = 0
-        while self.is_alive:
-            page += 1
-            url = self.url + str(page)
 
-            html = requests.get(url).content
+        session = HTMLSession()
+        session.headers['user-agent'] = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36'
+
+        url = self.base_url + self.parameters.format(self.query)
 
+        while self.is_alive:
             try:
-                for a in bs(html, 'html.parser').find('section', {'id': 'algo-container'}).find_all('a', href=True):
-                    link = a['href']
+                html = session.get(url).html
+            except:
+                break
 
-                    if '=' in link:
-                        self.links.put(link)
+            for r in html.find('.b_algo'):
+                a = r.find('h2', first=True).find('a', first=True)
 
-            except:
-                self.is_alive = False
+                try:
+                    link = a.attrs['href']
+                except:
+                    continue
+
+                if self.is_valid(link):
+                    self.links.put(link)
+
+            next_page = self.next_page(html)
+
+            if not next_page:
+                break
+
+            url = next_page
+
+        with self.lock:
+            self.is_searching = False
 
     def get_link(self):
         if self.links.qsize():
             return self.links.get()
 
     def start(self):
+
         self.find_links()
 
+    def is_active(self):
+
+        with self.lock:
+            is_searching = self.is_searching
+
+        if is_searching or self.links.qsize() > 0:
+            return True
+
+        return False
+
     def stop(self):
         self.is_alive = False

lib/sql.py

@@ -33,11 +33,10 @@ def search_manager(self):
 
         while self.is_alive:
 
-            if not self.search.is_alive and not self.search.links.qsize():
+            if not self.search.is_active():
                 break
             else:
                 link = self.search.get_link()
-
                 if link:
                     with self.lock:
                         self.links.append(link)
@@ -48,7 +47,6 @@ def search_manager(self):
             self.is_alive = False
 
     def link_manager(self):
-        # bots_per_proxy = 0
         is_started = False
 
         while self.is_alive:
@@ -62,18 +60,9 @@ def link_manager(self):
 
             browsers = []
             for link in self.links:
-                # if not self.proxy or bots_per_proxy >= max_bots_per_proxy:
-                    # self.proxy = self.proxy_manager.get_proxy()
-                    # bots_per_proxy = 0
-
-                # if not self.proxy:
-                #     sleep(1.5)
-                #     continue
 
                 if not link in self.active_links and len(self.active_links) < max_active_browsers:
-                    # bots_per_proxy += 1
                     self.active_links.append(link)
-                    # browser = Browser(link, self.proxy)
                     browser = Browser(link)
                     browsers.append(browser)
                     self.browsers.append(browser)
@@ -113,9 +102,6 @@ def browser_manager(self):
                         else:
                             self.display.is_not_vulner(browser.link)
 
-                    # else:
-                        # self.proxy_manager.bad_proxy(browser.proxy)
-
                     with self.lock:
                         self.active_links.remove(browser.link)
                         self.browsers.remove(browser)
@@ -144,17 +130,11 @@ def start(self):
         search_manager.daemon = True
         search_manager.start()
 
-        # self.display.info('Searching for proxies ...')
-        # proxy_manager = Thread(target=self.proxy_manager.start)
-        # proxy_manager.daemon = True
-        # proxy_manager.start()
-
         self.browser_manager()
 
     def stop(self):
         if self.search:
             self.search.stop()
 
         self.is_alive = False
-        # self.proxy_manager.stop()
         self.display.shutdown(self.total_found)

requirements.txt

@@ -1,3 +1,4 @@
 bs4
 colorama
 requests
+requests_html