+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Cant find vulnarble websites (/showthread.php?tid=3973806)
Cant find vulnarble websites - SuperGT - Jan 4, 2014
Hello,i need help finding MySQL vulnarble websites.I have searched for a day using alot of different dorks and i cannot find even 1 website what has a working User,pws for control panel.
Sry,i know im a newbie but thats why im creating this thread :)
* - caste - Jan 4, 2014
check this search engine http://punkspider.hyperiongray.com/
* - TearItUp - Jan 4, 2014
There are many lists you can find on Pastebin via google and here on Hack forums with thousands of SQLi vulnerable sites on them.
http://lmgtfy.com/?q=sqli+vulnerable+sites
* - Im gone brah - Jan 4, 2014
Just use a dork, E.x if you're targeting a specific website use this dork:
PHP Code
<?php
site:thehimalayantimes.com ext:php inurl:id="
* - SaxyMadaFaka - Jan 4, 2014
I suggest you to learn google dorks before going ahead
Its quite simple you will be able to make your own dorks and find a shit ton of sites
* - Banish - Jan 4, 2014
I can't get my head around dorks. Most of the sites I find using dorks aren't vulnerable. I personally thinks it's a waste of time, unless someone could tell me how to do it efficiently =/
~I use this pastebin to find vuln sites. http://pastebin.com/qTL4J0vf
* - itzthead - Jan 4, 2014
(Jan 4, 2014 12:54 PM)3Hack Wrote: I can't get my head around dorks. Most of the sites I find using dorks aren't vulnerable. I personally thinks it's a waste of time, unless someone could tell me how to do it efficiently =/
~I use this pastebin to find vuln sites. http://pastebin.com/qTL4J0vf
You'll never find a vulnerable site that you can do anything with from that pastebin because they've all been hacked already, especially since it's such a small list.
Maybe you're using the dorks wrong, but there's no other way I know of to find random vuln sites. Even if you use a tool you still have to enter a dork for it to scan. The problem is probably that you're using dorks someone else already made. Just like with the pastebin, thousands of skids have already used them. The best thing to do is make up your own.
By the way that punkspider thing is total garbage.
* - SuperGT - Jan 4, 2014
but how do i find dorks myself ? Just randomly go on websites and if i get an error ill try to inject ?
* - cYBEROPTICS - Jan 4, 2014
I've PM'd you with some help.
too god damn short