Output results in a SQL dump format

Support

Administrator
Staff member
A-Parser Enterprise
In this article shows an example of a SQL dump file generation, ready for import into a database. For the escaping of symbols is used JavaScript. The script included in the preset, so you need version of A-Parser is not lower than 1.1.457.
lJ5t0.png

Code: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  • For example is used parsing of Google TOP10.
  • Outputs the result in the desired form this template:
2JBrR.png

  • Script for escaping of symbols:
Code:
Tools.prototype.SQL_escape = function(str) {
    return str.replace(/[\0\x08\x09\x1a\n\r"'\\\%]/g, function (char) {
        switch (char) {
            case "\0":
                return "\\0";
            case "\x08":
                return "\\b";
            case "\x09":
                return "\\t";
            case "\x1a":
                return "\\z";
            case "\n":
                return "\\n";
            case "\r":
                return "\\r";
            case "\"":
            case "'":
            case "\\":
            case "%":
                return "\\"+char;
        }
    });
}

Example of result:

INSERT INTO serp VALUES('\\o\'key\\', 'https://app.it.okstate.edu/okey/', 'OKey Account Services')
INSERT INTO serp VALUES('\\o\'key\\', 'https://app.it.okstate.edu/okey/index.php/module/Forgot/action/Index', 'Forgot your password? - OKey Account Services')
INSERT INTO serp VALUES('\\o\'key\\', 'https://app.it.okstate.edu/okey/index.php/module/Activate/action/Index', 'Activate your O-Key! - OKey Account Services')
INSERT INTO serp VALUES('\\o\'key\\', 'https://go.osuit.edu/computer_information_services/okey', 'Orange Key Account Services - OSU Institute of Technology')
INSERT INTO serp VALUES('\\o\'key\\', 'http://okeyinvestors.ru/', 'O\'KEY Investors | Investors (Main)')
INSERT INTO serp VALUES('\\o\'key\\', 'https://www.google.com/search?q=\%5Co\'key\%5C&hl=en&prmd=ivns&tbm=isch&tbo=u&source=univ&sa=X&ved=0ahUKEwingM-cwNvLAhVnQZoKHXPsAlsQsAQIMQ', 'Images for \\o\'key\\')
INSERT INTO serp VALUES('\\o\'key\\', 'http://www.osuokc.edu/onlineclass/pdf/okey_sis_flier.pdf', 'Activating Your O-Key Account If you cannot get into O-Key, SIS or ...')
INSERT INTO serp VALUES('\\o\'key\\', 'http://www.intesasanpaolo.com/servizi-multicanale/sicurezza.jsp', 'O-key di Intesa Sanpaolo: lo strumento di One Time Password ...')
INSERT INTO serp VALUES('\\o\'key\\', 'http://www.okmarket.ru/', 'О\'КЕЙ')
INSERT INTO serp VALUES('\\o\'key\\', 'https://www.o-venture.com/category.php?cid=3', 'Big O Key Ring | Never Lose Your Keys Again | Hands Free | O ...')
INSERT INTO serp VALUES('test', 'http://www.speedtest.net/', 'Speedtest.net by Ookla - The Global Broadband Speed Test')
INSERT INTO serp VALUES('test', 'https://en.wikipedia.org/wiki/Test', 'Test - Wikipedia, the free encyclopedia')
INSERT INTO serp VALUES('test', 'https://www.test.com/', 'Platform to Create Organizational Testing and Certifications')
INSERT INTO serp VALUES('test', 'https://www.google.com/webmasters/tools/mobile-friendly/', 'Mobile-Friendly Test - Google')
INSERT INTO serp VALUES('test', 'https://www.speakeasy.net/speedtest/', 'Speakeasy Speed Test - Powered by MegaPath')
INSERT INTO serp VALUES('test', 'http://www.humanmetrics.com/cgi-win/jtypes2.asp', 'Personality test based on C. Jung and I. Briggs Myers type theory')
INSERT INTO serp VALUES('test', 'http://www.cambridgeenglish.org/test-your-english/', 'Test your English - Cambridge English')
INSERT INTO serp VALUES('test', 'https://www.16personalities.com/free-personality-test', 'Free Personality Test | 16Personalities')
INSERT INTO serp VALUES('test', 'http://www.tested.com/', 'Tested')
INSERT INTO serp VALUES('test', 'http://www.act.org/content/act/en/products-and-services/the-act/taking-the-test.html', 'Test Dates - ACT')
INSERT INTO serp VALUES('A-Parser', 'http://a-parser.com/', 'A-Parser - парсер для профессионалов SEO')
INSERT INTO serp VALUES('A-Parser', 'https://en.wikipedia.org/wiki/Parsing', 'Parsing - Wikipedia, the free encyclopedia')
INSERT INTO serp VALUES('A-Parser', 'http://searchsoa.techtarget.com/definition/parser', 'What is parser? - Definition from WhatIs.com - SearchSOA')
INSERT INTO serp VALUES('A-Parser', 'https://www.techopedia.com/definition/3854/parser', 'What is Parser? - Definition from Techopedia')
INSERT INTO serp VALUES('A-Parser', 'https://docs.python.org/2/library/htmllib.html', '19.3. htmllib — A parser for HTML documents — Python 2.7.11 ...')
INSERT INTO serp VALUES('A-Parser', 'http://lisperator.net/pltut/parser/', 'Writing a parser - Lisperator.net')
INSERT INTO serp VALUES('A-Parser', 'http://llvm.org/docs/tutorial/LangImpl2.html', '2. Kaleidoscope: Implementing a Parser and AST — LLVM 3.9 ...')
INSERT INTO serp VALUES('A-Parser', 'http://www.willamette.edu/~fruehr/haskell/seuss.html', 'Dr. Seuss on Parser Monads - Willamette University')
INSERT INTO serp VALUES('A-Parser', 'https://luv.asn.au/overheads/lex_yacc/yacc.html', 'Yacc - A parser generator')
 
No, it is not a search for vulnerable sites. It's just a way to save parsing results in SQL dump format.
 
you mean it is ready to be imported from sqli dumper to search for vulnerable sites ?

and how can i import result into sqli dumper
 
To sqli dumper this preset has no relation. And it does not search for the vulnerable sites. It's just a way to save the results in a form ready for import into a SQL database.
 
Back
Top