[anonon1234]

Hi, I'm new so sorry if this is a stupid question.

what is the best way to find sql injection vunerable websites using google dorking or just in general?

[Bastille]

As far as I know, Google Dorks rely on texts (URL, body, header, ...) not fields, like those used for authentication and vulnerable to SQLi


Otherwiwe you can use tools such as sqlmap, but not friendly-user

[Skorp]

I personally don't like relying on tools, as they are limited in what they can find and I hate hate hate false positives. But if it's a bigger site, a tool may help. But I prefer to do any searching manually.

[DramaKing]

Hi, I'm new so sorry if this is a stupid question.


what is the best way to find sql injection vunerable websites using google dorking or just in general?

SQLi vulnerabilities are present in backend code and are thus impossible to scrape. I tried this the other day. They're also very rare. You can try search for vulnerabilities in web apps and then searching for the vulnerable versions of whatever apps you find.

[ciadiscret]

Hi, I'm new so sorry if this is a stupid question.


what is the best way to find sql injection vunerable websites using google dorking or just in general?

1 find vulnerabilities.... ACUNETIX
2 depending on the leak/vulnerability found, take the tool that goes with it ( sql vuln ... sqlmap ; xss ..beef)