+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Finding SQL injection (/showthread.php?tid=6298508)
Finding SQL injection - anonon1234 - May 19, 2025
Hi, I'm new so sorry if this is a stupid question.
what is the best way to find sql injection vunerable websites using google dorking or just in general?
RE: Finding SQL injection - Bastille - May 19, 2025
As far as I know, Google Dorks rely on texts (URL, body, header, ...) not fields, like those used for authentication and vulnerable to SQLi
Otherwiwe you can use tools such as sqlmap, but not friendly-user
RE: Finding SQL injection - Skorp - May 19, 2025
I personally don't like relying on tools, as they are limited in what they can find and I hate hate hate false positives. But if it's a bigger site, a tool may help. But I prefer to do any searching manually.
RE: Finding SQL injection - DramaKing - May 19, 2025
(May 19, 2025 10:01 AM)anonon1234 Wrote: Hi, I'm new so sorry if this is a stupid question.
what is the best way to find sql injection vunerable websites using google dorking or just in general?
SQLi vulnerabilities are present in backend code and are thus impossible to scrape. I tried this the other day. They're also very rare. You can try search for vulnerabilities in web apps and then searching for the vulnerable versions of whatever apps you find.
RE: Finding SQL injection - ciadiscret - May 20, 2025
(May 19, 2025 10:01 AM)anonon1234 Wrote: Hi, I'm new so sorry if this is a stupid question.
what is the best way to find sql injection vunerable websites using google dorking or just in general?
1 find vulnerabilities.... ACUNETIX
2 depending on the leak/vulnerability found, take the tool that goes with it ( sql vuln ... sqlmap ; xss ..beef)