[zabazyept]

how to find vulnerable websites completely for free and easily? (vulnerable to stuff such as XSS, SQLi, ETC.)

The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.

[onlineuser | D3RFER]

I'm sure DramaKing can help you out.
sideyes

[▄︻デ══━一一一一━]

how to find vulnerable websites completely for free and easily? (vulnerable to stuff such as XSS, SQLi, ETC.)

It's not simpler to locate extremely vulnerable sites because an overwhelming percentage of public assets get actively tracer-blasted, patched, and WAF-ed or CDN-ed. The overwhelming majority of vaunted “easy” prey turn out to be stale sites, honeypots, or false positives cooked up by automated scanners. Actual vulnerabilities run rampant through legacy systems, poorly maintained third-party modules, or ignored subdomains. To validate a vulnerability of high severity, we subsequently require patience, verification by hand, and knowledge of the tested environment. Thereconsistent outcomes stem from systematic efforts such as Version drift monitoring, bug-bounty programs, and asset inventories.

[zabazyept]

It's not simpler to locate extremely vulnerable sites because an overwhelming percentage of public assets get actively tracer-blasted, patched, and WAF-ed or CDN-ed. The overwhelming majority of vaunted “easy” prey turn out to be stale sites, honeypots, or false positives cooked up by automated scanners. Actual vulnerabilities run rampant through legacy systems, poorly maintained third-party modules, or ignored subdomains. To validate a vulnerability of high severity, we subsequently require patience, verification by hand, and knowledge of the tested environment. Thereconsistent outcomes stem from systematic efforts such as Version drift monitoring, bug-bounty programs, and asset inventories.

ok

[DramaKing]

I never got notified, but I endorse the above answer. XSS and SQLi scanning can be automated, but you have to test sites pretty much one at a time. There are SQLi dorks that you can use it find injection points, but that on no way indicates improper sanitization of user input.

[Hackers]

google dorks

old web software versions

old openssl

etc etc

There are so many different types of vulns, you should look into some sqli, xss, wordpress, and other scanners to get started & learn the concepts.

[Stealthy]

La mejor manera es usar google dorks para buscar depronto sitios con tecnologia obsoleta

The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.

[Ivanov_1]

how to find vulnerable websites completely for free and easily? (vulnerable to stuff such as XSS, SQLi, ETC.)

OP i suggest you to use the search before posting,as your question has been asked too many times.
Look in the below section 0f the forum for help,tutorial ect.

SQL Injection Attacks

[The Pact]

how to find vulnerable websites completely for free and easily? (vulnerable to stuff such as XSS, SQLi, ETC.)

From the Help Documents-"Use good grammar. Basically, start sentences with a capital and end them with punctuation."

Please read all the Help Documents.