[ksieciunio1337]

Hello there
are there any methods for finding vulnurable websites other than google dorks?

[photon_boy]

Can you please go over essential Google dorks for finding vulnerabilities in websites?

[linkinpork]

Hello there
are there any methods for finding vulnurable websites other than google dorks?

Hi, welcome to HF!

Services like Shodan https://www.shodan.io/ are great. Find a vulnerability to focus on, then search for the service. Like say you know a MongoDB hack, search for "MongoDB", then work your way from there.



You can also use Nmap or Zenmap https://nmap.org/download.html on a CIDR range. Like, say you want to hack Apache, you go for port 80 and port 443, then use the vuln NSE script. Nmap takes CIDR ranges, so if, say you wanted to attack a CIDR range owned by Iran -- nmap -p 80,443 --script vuln 195.182.38.0/24

There's really more options out there, it all depends on what exploit you're planning on taking advantage of.

Cheers!

[knxtxx97]

'pagodo' i sqlmap