Hack Forums
Google dork for finding vulnerable gov sites - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Google dork for finding vulnerable gov sites (/showthread.php?tid=5225080)

Pages: Pages 1 2

Google dork for finding vulnerable gov sites - Çh┘?melÉon - Apr 3, 2016

Google dork for finding vulnerable gov sites


[img]http://kdurham.com/site/wp-content/uploads/2014/08/vulnerability_sign.png[/img]


I was playing around with Google on my tablet this morning. I found this cool that seems to show SQLi vulnerable government sites. I entered some of them and found sensitive information.

So this might be something to take a look at. Enjoy!


Spoiler (Click to View)

* - LaughingGas - Apr 3, 2016

Tested around with this, nice dork.

* - 0x7FFDF000 - Apr 3, 2016

How good is your SQL knowledge?

* - Çh┘?melÉon - Apr 3, 2016

(Apr 3, 2016 11:29 AM)0x7FFDF000 Wrote:  How good is your SQL knowledge?

I am pretty good with SQL injection. I have compromised many eshops and fetched cc and personal information as well as defacing uploading shells.
(Apr 3, 2016 11:17 AM)LaughingGas Wrote:  Tested around with this, nice dork.

Thanks man. I hope you have a big success.

* - Walt Disney™ - Apr 3, 2016

What do you gain by adding "& inurl:gov & inurl:gov" to the end? Would the same concept apply to "com" "net" and "org"?

* - Çh┘?melÉon - Apr 3, 2016

(Apr 3, 2016 11:45 AM)Walt Disney™ Wrote:  What do you gain by adding "& inurl:gov & inurl:gov" to the end? Would the same concept apply to "com" "net" and "org"?

Yes it will the gov parameters are defining that it is government owned website. And yes if you were to change gov to com,net or org it would display websites that end with com,net and org. I hope I explained this clearly if you need any help feel free to ask more questions. Thank you 🤝

* - 0x7FFDF000 - Apr 3, 2016

(Apr 3, 2016 11:43 AM)reptil3 Wrote:  I am pretty good with SQL injection. I have compromised many eshops and fetched cc and personal information as well as defacing uploading shells.

Thanks man. I hope you have a big success.
It doesn't show.
When you're dorking an sql error, you're stumbling into sites that have errors by default to them due improper programming. You can not inject into websites that are dysfunctional in the first place.

* - Çh┘?melÉon - Apr 3, 2016

(Apr 3, 2016 11:58 AM)0x7FFDF000 Wrote:  It doesn't show.
When you're dorking an sql error, you're stumbling into sites that have errors by default to them due improper programming. You can not inject into websites that are dysfunctional in the first place.

In some cases you are right. The results that you get from that dork are mixed many websites that show up are infact vulnerable to sqli while others as you mentioned are faulty by default. 🤝

* - Uploader.sx - Apr 4, 2016

Thank you mate 🤝

* - Çh┘?melÉon - Apr 4, 2016

(Apr 4, 2016 06:03 AM)RealMafia Wrote:  Thank you mate 🤝

No problem my friend. Glad you enjoyed it ! :)

* - vanbookpro - Apr 6, 2016

site:gov can be used instead of inurl:gov & inurl:gov????

* - djstell1 - Apr 7, 2016

Thank you

#25 character

* - Çh┘?melÉon - May 29, 2016

(Apr 7, 2016 12:49 PM)djstell1 Wrote:  Thank you

#25 character

No problem :)

* - R^ptor - May 31, 2016

Thanks brotha gunna test some out!

* - Çh┘?melÉon - May 31, 2016

(May 31, 2016 05:02 AM)Phantom4lfye Wrote:  Thanks brotha gunna test some out!

Glad you liked it!