Login Register
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Whats your fave dork list? filter_list
Author
Message
Whats your fave dork list? #1
Spoiler: Mine is
"ftp://" "www.eastgame.net"
"html allowed" guestbook
"Powered by: vBulletin Version 1.1.5"
"Select a database to view" intitle:"filemaker pro"
"set up the administrator user" inurl:pivot
"There are no Administrators Accounts" inurl:admin.php -mysql_fetch_row
"Welcome to Administration" "General" "Local Domains" "SMTP Authentication" inurl:admin
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"Welcome to the Prestige Web-Based Configurator"
"YaBB SE Dev Team"
"you can now password" | "this is a special page only seen by you. your profile visitors" inurl:imchaos
("Indexed.By"|"Monitored.By") hAcxFtpScan
(inurl:/shop.cgi/page=) | (inurl:/shop.pl/page=)
allinurl:"index.php" "site=sglinks"
allinurl:install/install.php
allinurl:intranet admin
filetype:cgi inurl:"fileman.cgi"
filetype:cgi inurl:"Web_Store.cgi"
filetype:php inurl:vAuthenticate
filetype:pl intitle:"Ultraboard Setup"
Gallery in configuration mode
Hassan Consulting's Shopping Cart Version 1.18
intext:"Warning: * am able * write ** configuration file" "includes/configure.php" -Forums
intitle:"Gateway Configuration Menu"
intitle:"Horde :: My Portal" -"[Tickets"
intitle:"Mail Server CMailServer Webmail" "5.2"
intitle:"MvBlog powered"
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
intitle:"Uploader - Uploader v6" -pixloads.com
intitle:osCommerce inurl:admin intext:"redistributable under the GNU" intext:"Online Catalog" -demo -site:oscommerce.com
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
inurl:"/NSearch/AdminServlet"
inurl:"index.php? module=ew_filemanager"
inurl:aol*/_do/rss_popup?blogID=
inurl:footer.inc.php
inurl:info.inc.php
inurl:ManyServers.htm
inurl:newsdesk.cgi? inurl:"t="
inurl:pls/admin_/gateway.htm
inurl:rpSys.html
inurlConfusedearch.php vbulletin
inurlConfusedervlet/webacc
natterchat inurl:home.asp -site:natterchat.co.uk
XOOPS Custom Installation
[Image: twyq7AI.gif]

Reply

RE: Whats your fave dork list? #2
Not sure what this is o.o
Is this some sort of "search term" list?

Reply

RE: Whats your fave dork list? #3
(07-08-2013, 08:05 PM)Crow Wrote: Not sure what this is o.o
Is this some sort of "search term" list?

well yeah Smile what it does is serve as a way to find exploitable websites to have the ability to hack. Take one of the items on my list, put it in google and search and it should come up with sites that are vuln. that list is a server list. so any server you find, has a specific vuln.
[Image: twyq7AI.gif]

Reply

RE: Whats your fave dork list? #4
hell yeah google dorking
is really an effective method to finding vuln websites.
thanks for the list good ones.

i dont have my own list
just try to keep updated with the latest dorks

Reply

RE: Whats your fave dork list? #5
Google dorks like this are just stupid. What's the point in targeting random sites unless you're looking for some actual useful information? Use Google dorks to find vulnerabilities in a target website, not random ones.
[Image: F4Z9Dqw.png]

Reply

RE: Whats your fave dork list? #6
(07-09-2013, 04:12 PM)BreShiE Wrote: Google dorks like this are just stupid. What's the point in targeting random sites unless you're looking for some actual useful information? Use Google dorks to find vulnerabilities in a target website, not random ones.

Unless you are putting up flooding shells, etc. But I agree. I make my own dorks to find phishing pages and it seems to work better than any premade dork for the same thing, because I look for logs where a lot of the bullshit (anything but user/pass) is and isn't there, so I don't miss cleaner logs. Also, a lot of these dorks can get saturated.

Reply

RE: Whats your fave dork list? #7
(07-09-2013, 07:13 PM)Sinisterkid Wrote: Unless you are putting up flooding shells, etc. But I agree. I make my own dorks to find phishing pages and it seems to work better than any premade dork for the same thing, because I look for logs where a lot of the bullshit (anything but user/pass) is and isn't there, so I don't miss cleaner logs. Also, a lot of these dorks can get saturated.

I know your active on this site so im gonna help you out, Check your PM's
[Image: twyq7AI.gif]

Reply

RE: Whats your fave dork list? #8
Google/Php dorks are effective when your first learning injection methods of sorts, but they become sometimes useless once you move into specific targets. I'll save this list just in-case i get bored or something.

Reply







Users browsing this thread: