Hack Forums
Whats the best way to find SQL vulnerable websites - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Whats the best way to find SQL vulnerable websites (/showthread.php?tid=6066028)



Whats the best way to find SQL vulnerable websites - lostquotez_ - Apr 11, 2020

i would like to know whats the best way to find vulnerable websites for sql injection
for defacement


RE: Whats the best way to find SQL vulnerable websites - ~[DogiD]~ - Apr 11, 2020

Google dork, this is from 2011 but it still works https://hackforums.net/showthread.php?tid=1399276

Finding SQL Injection in modern sites is tricky.
Most of them are already patched OR they are using REST API or GraphQL or other methods to ask data from Database instead of querying.

~ DogiD


RE: Whats the best way to find SQL vulnerable websites - player92 - Apr 12, 2020

find manually the vulnerability via google, thats the only best way


RE: Whats the best way to find SQL vulnerable websites - cracker.toni - Apr 12, 2020

apbank.ch/index.php?id=18
vulnerable?
can some one help me with this?


RE: Whats the best way to find SQL vulnerable websites - нα¢кєя - Apr 13, 2020

(Apr 12, 2020 02:02 PM)cracker.toni Wrote:  apbank.ch/index.php?id=18
vulnerable?
can some one help me with this?

This is ILLEGAL. Do not deface/attempt to hack for blackhat reasons.


RE: Whats the best way to find SQL vulnerable websites - dexter0 - Apr 17, 2020

For a massive finding of SQL Injections, just use dorks, but not only with inurl:"id?=....". Try to look for errors generated by different databases.

If you want to find SQL Injection on a specific website, that is a different topic and you have a lot of options.