+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Dorking vulnerable web sites (/showthread.php?tid=5995971)
Dorking vulnerable web sites - myselfandi - Aug 4, 2019
I tried searching for websites with that have this url "wp-admin/install.php?step=1" in them
using this dork "inurl:wp-admin/install.php?step=1" theoretically it should yield a lot of hits. but google result was just couple of web sites
I tried to limit my search to one server like this IP:***** but it seems IP command is suspended by bing or something, and that bing doesn't support inurl command for some reason.
bref, Is there there another way to archive the same result,
RE: Dorking vulnerable web sites - compalabee - Aug 4, 2019
Mate, sorry to be the bearer of bad news, but /wp-admin/ is typically covered by exlusion protocols. The best you can do is to search for the presence of Wordpress, and then work your way from there.
Try this:
Code
inurl:"/wp-content/plugins/" intitle:"index of"after which you check out
Code
(DOMAIN.COM)/license.txt/or
Code
(DOMAIN.COM)/readme.html/to find out the installation version. If it fits your fancy (and your skillset), wreak havoc! :)
RE: Dorking vulnerable web sites - myselfandi - Aug 4, 2019
(Aug 4, 2019 04:47 AM)compalabee Wrote: Mate, sorry to be the bearer of bad news, but /wp-admin/ is typically covered by exlusion protocols. The best you can do is to search for the presence of Wordpress, and then work your way from there.
Try this:
Codeinurl:"/wp-content/plugins/" intitle:"index of"
after which you check out
Code(DOMAIN.COM)/license.txt/
or
Code(DOMAIN.COM)/readme.html/
to find out the installation version. If it fits your fancy (and your skillset), wreak havoc! :)
Thanks for clarification.