+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Whats your fave dork list? (/Thread-Whats-your-fave-dork-list)
Whats your fave dork list? - 303315 - 07-08-2013
Spoiler: Mine is
"ftp://" "www.eastgame.net"
"html allowed" guestbook
"Powered by: vBulletin Version 1.1.5"
"Select a database to view" intitle:"filemaker pro"
"set up the administrator user" inurl:pivot
"There are no Administrators Accounts" inurl:admin.php -mysql_fetch_row
"Welcome to Administration" "General" "Local Domains" "SMTP Authentication" inurl:admin
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"Welcome to the Prestige Web-Based Configurator"
"YaBB SE Dev Team"
"you can now password" | "this is a special page only seen by you. your profile visitors" inurl:imchaos
("Indexed.By"|"Monitored.By") hAcxFtpScan
(inurl:/shop.cgi/page=) | (inurl:/shop.pl/page=)
allinurl:"index.php" "site=sglinks"
allinurl:install/install.php
allinurl:intranet admin
filetype:cgi inurl:"fileman.cgi"
filetype:cgi inurl:"Web_Store.cgi"
filetype:php inurl:vAuthenticate
filetype:pl intitle:"Ultraboard Setup"
Gallery in configuration mode
Hassan Consulting's Shopping Cart Version 1.18
intext:"Warning: * am able * write ** configuration file" "includes/configure.php" -Forums
intitle:"Gateway Configuration Menu"
intitle:"Horde :: My Portal" -"[Tickets"
intitle:"Mail Server CMailServer Webmail" "5.2"
intitle:"MvBlog powered"
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
intitle:"Uploader - Uploader v6" -pixloads.com
intitle:osCommerce inurl:admin intext:"redistributable under the GNU" intext:"Online Catalog" -demo -site:oscommerce.com
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
inurl:"/NSearch/AdminServlet"
inurl:"index.php? module=ew_filemanager"
inurl:aol*/_do/rss_popup?blogID=
inurl:footer.inc.php
inurl:info.inc.php
inurl:ManyServers.htm
inurl:newsdesk.cgi? inurl:"t="
inurl:pls/admin_/gateway.htm
inurl:rpSys.html
inurl
earch.php vbulletin
inurlervlet/webacc
natterchat inurl:home.asp -site:natterchat.co.uk
XOOPS Custom Installation
"html allowed" guestbook
"Powered by: vBulletin Version 1.1.5"
"Select a database to view" intitle:"filemaker pro"
"set up the administrator user" inurl:pivot
"There are no Administrators Accounts" inurl:admin.php -mysql_fetch_row
"Welcome to Administration" "General" "Local Domains" "SMTP Authentication" inurl:admin
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"Welcome to the Prestige Web-Based Configurator"
"YaBB SE Dev Team"
"you can now password" | "this is a special page only seen by you. your profile visitors" inurl:imchaos
("Indexed.By"|"Monitored.By") hAcxFtpScan
(inurl:/shop.cgi/page=) | (inurl:/shop.pl/page=)
allinurl:"index.php" "site=sglinks"
allinurl:install/install.php
allinurl:intranet admin
filetype:cgi inurl:"fileman.cgi"
filetype:cgi inurl:"Web_Store.cgi"
filetype:php inurl:vAuthenticate
filetype:pl intitle:"Ultraboard Setup"
Gallery in configuration mode
Hassan Consulting's Shopping Cart Version 1.18
intext:"Warning: * am able * write ** configuration file" "includes/configure.php" -Forums
intitle:"Gateway Configuration Menu"
intitle:"Horde :: My Portal" -"[Tickets"
intitle:"Mail Server CMailServer Webmail" "5.2"
intitle:"MvBlog powered"
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
intitle:"Uploader - Uploader v6" -pixloads.com
intitle:osCommerce inurl:admin intext:"redistributable under the GNU" intext:"Online Catalog" -demo -site:oscommerce.com
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
intitle:phpMyAdmin "Welcome to phpMyAdmin ***" "running on * as root@*"
inurl:"/NSearch/AdminServlet"
inurl:"index.php? module=ew_filemanager"
inurl:aol*/_do/rss_popup?blogID=
inurl:footer.inc.php
inurl:info.inc.php
inurl:ManyServers.htm
inurl:newsdesk.cgi? inurl:"t="
inurl:pls/admin_/gateway.htm
inurl:rpSys.html
inurl
earch.php vbulletininurl
ervlet/webaccnatterchat inurl:home.asp -site:natterchat.co.uk
XOOPS Custom Installation
RE: Whats your fave dork list? - Nuance - 07-08-2013
Not sure what this is o.o
Is this some sort of "search term" list?
RE: Whats your fave dork list? - 303315 - 07-09-2013
(07-08-2013, 08:05 PM)Crow Wrote: Not sure what this is o.o
Is this some sort of "search term" list?
well yeah
what it does is serve as a way to find exploitable websites to have the ability to hack. Take one of the items on my list, put it in google and search and it should come up with sites that are vuln. that list is a server list. so any server you find, has a specific vuln.
RE: Whats your fave dork list? - Spartan - 07-09-2013
hell yeah google dorking
is really an effective method to finding vuln websites.
thanks for the list good ones.
i dont have my own list
just try to keep updated with the latest dorks
RE: Whats your fave dork list? - BreShiE - 07-09-2013
Google dorks like this are just stupid. What's the point in targeting random sites unless you're looking for some actual useful information? Use Google dorks to find vulnerabilities in a target website, not random ones.
RE: Whats your fave dork list? - ErroraBorealis - 07-09-2013
(07-09-2013, 04:12 PM)BreShiE Wrote: Google dorks like this are just stupid. What's the point in targeting random sites unless you're looking for some actual useful information? Use Google dorks to find vulnerabilities in a target website, not random ones.
Unless you are putting up flooding shells, etc. But I agree. I make my own dorks to find phishing pages and it seems to work better than any premade dork for the same thing, because I look for logs where a lot of the bullshit (anything but user/pass) is and isn't there, so I don't miss cleaner logs. Also, a lot of these dorks can get saturated.
RE: Whats your fave dork list? - 303315 - 07-09-2013
(07-09-2013, 07:13 PM)Sinisterkid Wrote: Unless you are putting up flooding shells, etc. But I agree. I make my own dorks to find phishing pages and it seems to work better than any premade dork for the same thing, because I look for logs where a lot of the bullshit (anything but user/pass) is and isn't there, so I don't miss cleaner logs. Also, a lot of these dorks can get saturated.
I know your active on this site so im gonna help you out, Check your PM's
RE: Whats your fave dork list? - Mαfιια - 08-14-2013
Google/Php dorks are effective when your first learning injection methods of sorts, but they become sometimes useless once you move into specific targets. I'll save this list just in-case i get bored or something.