[Aakash_Choudhary]

Hi friends I am CodeNinja a.k.a. Aakash Choudhary

Friends i know how to find injection point of given site like :->

site:sitename.com "?php(*)="

And Crawling the site. I use burpsuite to crawl site.

But i also want to know all other methods too which you guys use while targeting site.

Please share your methods too.That way beginners like me learn and practice and apply these methods

THANKS 🤝

[krankenstein]

I prefer Manual...........................
########################################
Bing/google
+
site:yoursitename.com
+
or (manual) Just go that site and click somewhere....................

[xx 0x0 xx]

personally when i check target first thing i look at the used script if it's public then i download it looking for sql injection and get parameter then try it on the live target

if the script private then i use bing and google and manual as krankenstein said

[GOD OF SARADOMIN]

can u guy's help me get down a website for couple a minutes ?

[Wireless Network]

What i can give you as advice is always check robots.txt
In my experience, i was targeting medium - big site in my country and i've spent month trying to find anything, then i was let's see robots.txt and guess what, it contained link to unsecured picture upload