E-DUMP - Extracts email addresses from a MySQL database.

SUBMITTED BY: crazyren

DATE: May 24, 2016, 12:57 p.m.

FORMAT: PHP

SIZE: 7.3 kB

Raw Download

HITS: 85467

Report
  1. <?php
  2. /*
  4. -------------------------------------------------------------------------------
  5. [ E-DUMP ]---------------------------------------------------------------------
  6. - Extracts email addresses from a MySQL database.
  8. -------------------------------------------------------------------------------
  9. [ TO RUN THE SCRIPT ]----------------------------------------------------------
  10. PHP Version 5.6.8
  11. php5-cli Lib
  12. MySQL support Enabled
  13. MySQL version 5.0.11
  14. Permission Writing
  16. -------------------------------------------------------------------------------
  17. [ ABOUT DEVELOPER ]------------------------------------------------------------
  18. NAME CoderPirata
  19. Blog http://coderpirata.blogspot.com.br/
  20. Twitter https://twitter.com/coderpirata
  21. Google+ https://plus.google.com/103146866540699363823
  22. Pastebin http://pastebin.com/u/CoderPirata
  23. Github https://github.com/coderpirata/
  25. */
  27. ini_set('error_log',NULL);
  28. ini_set('log_errors',FALSE);
  29. ini_set('display_errors', FALSE);
  30. ini_set('max_execution_time', FALSE);
  32. $oo = getopt('h::', ['help::', 'host:', 'user:', 'pass:', 'dbname:', 'save:', 'no-info']);
  34. function cores($nome){
  35. $cores = array("r" => "\033[1;31m", "g" => "\033[0;32m", "b" => "\033[1;34m", "g2" => "\033[1;30m", "g1" => "\033[0;37m");
  36. if(substr(strtolower(PHP_OS), 0, 3) != "win"){ return $cores[strtolower($nome)]; }
  37. }
  39. echo cores("g1")."
  40. ooooooooooo ooooooooo ooooo oooo oooo oooo oooooooooo
  41. 888 88 888 88o 888 88 8888o 888 888 888
  42. 888ooo8 oooooo 888 888 888 88 88 888o8 88 888oooo88
  43. 888 oo 888 888 888 88 88 888 88 888
  44. o888ooo8888 o888ooo88 888oo88 o88o 8 o88o o888o\n
  45. \t ".cores("g2")."[ ".cores("g1")."DUMP EMAILS FROM ".cores("b")."MYSQL".cores("g1")." DATABASE! ".cores("g2")."]
  46. -----------------------------------------------------------------\n\n";
  48. if(isset($oo['h']) or isset($oo['help'])){
  49. die(cores("g1")."\t ooooo ooooo ooooooooooo ooooo oooooooooo
  50. \t 888 888 888 88 888 888 888
  51. \t 888ooo888 888ooo8 888 888oooo88
  52. \t 888 888 888 oo 888 o 888
  53. \t o888o o888o o888ooo8888 o888ooooo88 o888o\n
  54. ".cores("g2")."-----------------------------------------------------------------\n".cores("g1")."
  55. COMMAND:: ".cores("b")."--host ".cores("g1")."~ Sets the Host.
  56. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--host ".cores("g1")."localhost
  57. \n
  58. COMMAND:: ".cores("b")."--user ".cores("g1")."~ Sets the User.
  59. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--user ".cores("g1")."root
  60. \n
  61. COMMAND:: ".cores("b")."--pass ".cores("g1")."~ Sets the Password.
  62. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--pass ".cores("g1")."admin123
  63. \n
  64. COMMAND:: ".cores("b")."--dbname ".cores("g1")."~ Command to set the db that will be scanned. By default, all dbs will be scanned.
  65. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--dbname ".cores("g1")."mydatabase
  66. \n
  67. COMMAND:: ".cores("b")."--save ".cores("g1")."~ Saves the emails found on a list.
  68. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--save ".cores("g1")."email_list.txt
  69. {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--save ".cores("g1")."\"\"
  71. COMMAND:: ".cores("b")."--no-info ".cores("g1")."~ It does not display the \"databases\" and the tables.
  72. Example: {$_SERVER["SCRIPT_NAME"]} ".cores("b")."--no-info
  73. \n");
  74. }
  77. if(empty($oo['host']) or empty($oo['user']) or !isset($oo['pass'])){ die(); }
  78. $db_blacklist = array('information_schema', 'performance_schema');
  80. if(isset($oo["save"])){
  81. $save = cores("g")."YES";
  82. if(!empty($oo["save"])){$save .= cores("g2")."\n| ".cores("g1")."FILE NAME:: ".cores("b").$oo["save"].cores("g2"); }
  83. }else{ $save = cores("r")."NOT"; }
  84. if(isset($oo["dbname"])){ $dbnme = cores("g").$oo["dbname"]; }else{ $dbnme = cores("r")."NOT DEFINED"; }
  85. echo cores("g2").".-[ ".cores("g1")."INFOS".cores("g2")." ] ------------------------------------------------------
  86. | ".cores("g1")."HOST:: ".cores("b").$oo["host"].cores("g2")."
  87. | ".cores("g1")."USER:: ".cores("b").$oo["user"].cores("g2")."
  88. | ".cores("g1")."PASS:: ".cores("b").$oo["pass"].cores("g2")."
  89. | ".cores("g1")."DBNAME:: ".cores("b").$dbnme.cores("g2")."
  90. | ".cores("g1")."SAVE:: {$save}".cores("g2")."
  91. '-----------------------------------------------------------------\n";
  93. $conect = mysql_connect($oo["host"],$oo["user"],$oo["pass"]) or die(cores("r")."\n\nERROR:: ".mysql_error()."\n\n");
  94. if(empty($oo["dbname"])){
  95. $resultado = mysql_query("SHOW DATABASES;", $conect) or die(cores("r")."\n\nERROR:: ".mysql_error()."\n\n");
  96. while($data = mysql_fetch_row($resultado)){ $resultado_query .= implode('|-|-|-|-|-|',$data)."\n"; }
  97. $lim = explode("|-|-|-|-|-|", $resultado_query);
  98. foreach($lim as $lin){ if(!empty($lin)){ $dbnames = $lin; } }
  99. $dbname = explode("\n", $dbnames);
  100. foreach($dbname as $n => $d){
  101. foreach($db_blacklist as $blocked){ if(empty($d) or $d == $blocked){ unset($dbname[$n]); } }
  102. }
  103. }else{ $dbname[] = $oo["dbname"]; }
  105. if(!isset($oo["no-info"])){ echo cores("g1")."\n SEARCHIN IN:: "; }
  106. foreach($dbname as $dbnam3){
  107. if(!isset($oo["no-info"])){ echo cores("g2")."\n -----------------------------------\n ".cores("g2")."[ ".cores("g1")."DBNAME".cores("g2")." ]::".cores("b")."$dbnam3\n".cores("g2")." [ ".cores("g1")."TABLES ".cores("g2")."]::"; }
  108. mysql_select_db($dbnam3) or die(cores("r")."\n\nERROR:: ".mysql_error()."\n\n");
  109. $res = mysql_list_tables($dbnam3) or die(cores("r")."\n\nERROR:: ".mysql_error()."\n\n");
  110. while ($row = mysql_fetch_row($res)){
  111. $table = $row[0];
  112. $res2 = mysql_query("SHOW CREATE TABLE $table");
  113. if(!isset($oo["no-info"])){ echo cores("g2")." - ".cores("b")."{$table}"; }
  114. while ($lin = mysql_fetch_row($res2)){
  115. $res3 = mysql_query("SELECT * FROM $table");
  116. while($r=mysql_fetch_row($res3)){
  117. $sql="INSERT INTO $table VALUES (";
  119. for($j=0; $j<mysql_num_fields($res3);$j++){
  120. if($r[$j] != ""){ $dados .= " - ".$r[$j]." - "; }
  121. }
  122. }
  123. }
  124. $table = NULL;
  125. }
  126. }
  127. mysql_close($coneccao);
  129. if(!isset($oo["no-info"])){ echo cores("g2")."\n\n -----------------------------------------------------------------\n"; }
  130. preg_match_all("/([\w\d\.\-\_]+)@([\w\d\.\_\-]+)/mi", $dados, $possiveis);
  131. $email = array_unique(array_unique($possiveis[0]));
  132. if(empty($email)){ echo cores("r")."\n EMAIL(s) NOT FOUND\n"; goto sai; }else{ echo cores("g")."\n ".count($email)." EMAIL(s) FOUND".cores("g1")."\n\n"; }
  133. foreach ($email as $emails){ if(eregi(".", $emails)){ echo cores("g1")."\n EMAIL:: ".cores("g")."{$emails}"; } }
  134. echo "\n\n";
  136. if(!empty($email) and isset($oo["save"])){
  137. if(isset($oo["save"]) and empty($oo["save"])){ $name = "e-dump_emails.txt"; }else{ $name = $oo["save"]; }
  138. if(!file_exists($name)){ file_put_contents($name, "EMAIL's LEAKED FROM {$oo["host"]} WITH E-DUMP! ".PHP_EOL.PHP_EOL.PHP_EOL); }
  139. foreach ($email as $emails){ file_put_contents($name, "EMAIL: ".$emails.PHP_EOL, FILE_APPEND); }
  140. echo " ".cores("g1")."EMAILS SAVED IN: ".cores("b")."{$name}\n";
  141. }
  143. sai:
  144. echo cores("g2")." -----------------------------------------------------------------\n";
  146. #END
comments powered by Disqus