Traffic service & campaign optimization ◆ Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ ZexoCard: no-KYC virtual crypto cards ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Google dork for finding vulnerable gov sites

New Reply 

Google dork for finding vulnerable gov sites
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 3, 2016 06:09 AM
Google dork for finding vulnerable gov sites


[img]http://kdurham.com/site/wp-content/uploads/2014/08/vulnerability_sign.png[/img]


I was playing around with Google on my tablet this morning. I found this cool that seems to show SQLi vulnerable government sites. I entered some of them and found sensitive information.

So this might be something to take a look at. Enjoy!


Spoiler (Click to View)
LaughingGas
LaughingGas Offline
[user@HF:]
**
HF l33t
Posts:
191
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 3, 2016 11:17 AM
Tested around with this, nice dork.
0x7FFDF000
0x7FFDF000 Offline
[user@HF:]
*
Registered
Posts:
290
Threads:
5
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 3, 2016 11:29 AM
How good is your SQL knowledge?
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 3, 2016 11:43 AM (This post was last modified: Apr 3, 2016 11:44 AM by Çh┘?melÉon.)
(Apr 3, 2016 11:29 AM)0x7FFDF000 Wrote:  How good is your SQL knowledge?

I am pretty good with SQL injection. I have compromised many eshops and fetched cc and personal information as well as defacing uploading shells.
(Apr 3, 2016 11:17 AM)LaughingGas Wrote:  Tested around with this, nice dork.

Thanks man. I hope you have a big success.
Walt Disney™
Walt Disney™ Offline
Dreaded Ex-Staff
****
HF Ub3r
Posts:
9,070
Threads:
831
Credibility:
500
Popularity:
131
βytes:
β 0
Game XP:
1,172
Apr 3, 2016 11:45 AM
What do you gain by adding "& inurl:gov & inurl:gov" to the end? Would the same concept apply to "com" "net" and "org"?
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 3, 2016 11:49 AM
(Apr 3, 2016 11:45 AM)Walt Disney™ Wrote:  What do you gain by adding "& inurl:gov & inurl:gov" to the end? Would the same concept apply to "com" "net" and "org"?

Yes it will the gov parameters are defining that it is government owned website. And yes if you were to change gov to com,net or org it would display websites that end with com,net and org. I hope I explained this clearly if you need any help feel free to ask more questions. Thank you 🤝
0x7FFDF000
0x7FFDF000 Offline
[user@HF:]
*
Registered
Posts:
290
Threads:
5
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 3, 2016 11:58 AM
(Apr 3, 2016 11:43 AM)Çh┘?melÉon Wrote:  I am pretty good with SQL injection. I have compromised many eshops and fetched cc and personal information as well as defacing uploading shells.

Thanks man. I hope you have a big success.
It doesn't show.
When you're dorking an sql error, you're stumbling into sites that have errors by default to them due improper programming. You can not inject into websites that are dysfunctional in the first place.
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 3, 2016 12:26 PM (This post was last modified: Apr 3, 2016 12:26 PM by Çh┘?melÉon.)
(Apr 3, 2016 11:58 AM)0x7FFDF000 Wrote:  It doesn't show.
When you're dorking an sql error, you're stumbling into sites that have errors by default to them due improper programming. You can not inject into websites that are dysfunctional in the first place.

In some cases you are right. The results that you get from that dork are mixed many websites that show up are infact vulnerable to sqli while others as you mentioned are faulty by default. 🤝
Uploader.sx
Uploader.sx Offline
[closed@HF:]
Posts:
2,692
Threads:
454
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 4, 2016 06:03 AM
Thank you mate 🤝
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 4, 2016 09:55 AM
(Apr 4, 2016 06:03 AM)Uploader.sx Wrote:  Thank you mate 🤝

No problem my friend. Glad you enjoyed it ! :)
vanbookpro
vanbookpro Offline
[n00b@HF:]
*
Registered
Posts:
31
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 6, 2016 08:11 AM
site:gov can be used instead of inurl:gov & inurl:gov????
djstell1
djstell1 Offline
[n00b@HF:]
*
Registered
Posts:
25
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 7, 2016 12:49 PM
Thank you

#25 character
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 29, 2016 11:42 AM
(Apr 7, 2016 12:49 PM)djstell1 Wrote:  Thank you

#25 character

No problem :)
R^ptor
R^ptor Offline
Your favorite
***
HF l33t
Posts:
588
Threads:
62
Credibility:
000
Popularity:
82
βytes:
β 21.26
Game XP:
0
May 31, 2016 05:02 AM
Thanks brotha gunna test some out!
Çh┘?melÉon
Çh┘?melÉon Offline
[closed@HF:]
Posts:
184
Threads:
28
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
May 31, 2016 01:55 PM
(May 31, 2016 05:02 AM)R^ptor Wrote:  Thanks brotha gunna test some out!

Glad you liked it!
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by HackersMar 16, 2026 08:10 PM 4 376 Mar 16, 2026 08:10 PM
Last Post: Hackers
by zabazyeptOct 10, 2025 09:41 AM 8 487 Oct 10, 2025 09:41 AM
Last Post: The Pact
by AbuAbiatDec 15, 2024 03:39 AM 3 164 Dec 15, 2024 03:39 AM
Last Post: DarkRoot