Locked Shoryuken v1.0 - very simple tool to takeover systems vulnerable to SQL Injections

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

SHORYUKEN

 

Aimed at easy and fast hacking, shoryuken is a linux bash tool designed to get full control of poorly configurated web applications with backend DBMS in the same machine. In its current version, it uses SQL injection techniques to own MYSQL and MSSQL hosts when they run as OS user ROOT with application user having file privileges (Linux MySQL) or as DB sysadmin user with DB running as OS user SYSTEM (Windows MSSQL). It is done using the same unique HTTP request, the shoryuken (that means "rising dragon punch" in japanese).

Takeover is pretty straightforward with a single request issued to open a "custom shell" on Windows using xp_cmdshell output redirected to a file at default web server root (c:\inetpub\wwwroot) and on Linux using a PHP one line web shell with sudo also at default web server root (/var/www).

The custom shell is provided using default HTTP port 80 (it will be always there) without need to run or download anything and/or relying on firewall's policy.

 

Shoryuken needs curl installed (Debian-like systems: apt-get install curl).

Shoryuken only exploits SQL injection, you need to first find this kind of vulnerability on target using another tool or method.

 

Download -

This is the hidden content, please

• Sign In
• or
• Sign Up