Introduction about Shodan Shodan is a search engine for Internet-connected devices it was created by John C. Matherly (@achillean) in 2009.. Web search engines, such as Google and Bing, are great for finding websites. Shodan helps you to find information about desktops, servers, IoT devices, and more. This information includes metadata such as the software …
Shodan pentesting guide – introduction | part -1 Read More »
Google Hacking Basics A fairly large portion of this blog is dedicated to the techniques the “bad guys” will use to locate sensitive information. We present this information to help you become better informed about their motives so that you can protect yourself and perhaps your customers. We’ve already looked at some of the benign …
Finding various vulnerabilities using google dorking | part – 9.1 Read More »
Digging the internet with google dorks 1.Google queries for locating various Web servers Query Server “Apache/1.3.28 Server at” intitle:index.of Apache 1.3.28 “Apache/2.0 Server at” intitle:index.of Apache 2.0 “Apache/* Server at” intitle:index.of Any version of Apache “Microsoft-IIS/4.0 Server at” intitle:index.of Microsoft Internet Information Services 4.0 “Microsoft-IIS/5.0 Server at” intitle:index.of Microsoft Internet Information Services 5.0 “Microsoft-IIS/6.0 Server …
Finding various vulnerabilities with google dorking | part – 9 .1 Read More »
Stringed Dorks Stringing Queries has been a target for a very long time as it allows a large diversity of a search. This has recently been discovered in the mixture of using Search Functions and the GRS in combination. Rules to be acknowledged prior to trialing this method:1. You can only use it on Search …
Learn how to string/extend google dorks | part -9 Read More »
Most Known SQLi Error Vulnerability This is by far the most universally exploited vulnerability on the face of the planet when it comes to SQLi. Simply put; The database has an error that has been rendered and displayed prior to the indexing to the Google Index of Websites. What we call the internet for the …
Findin Sqli error vulnerabilities using google dorking | part – 8 Read More »
Google regex system Now this may be confusing. And trust me it should be. I’ve reused data from earlier with some minor adjustments to make it completely accurate. The reason I’ve done this is we need to start somewhere. And it’s certainly not going to be at the complete top, so you lose context of …
Basic Dorks Keyword PageType Page Parameter TargetKeyword(we will use xWord from now on) [XW] Keyword [KW] PageType [PT] PageParameter [PP] Example:KW .PT?PP=Shopping .php?cartID= Now you may be asking.“Where the did the: . ? and = come from?” The . is used on all devices to identify a file type. Which when we access via the …
Google Operator Syntax Advanced operators are additions to a query designed to narrow down the search results. Although they re relatively easy to use, they have a fairly rigid syntax that must be followed.The basic syntax of an advanced operator is operator:search_term. When using advanced operators, keep in mind the following: ■ There is no …
Google operator syntax When Dorking, we will sometimes face issues with syntax. An easy way to avoid phrases linking we don’t want them to and linking phrases we want to, we do this by using Search Operators and Search Functions. Below is a list of Search Functions and Operators for Google. This will become vital …
Basic syntax of dorking The most important thing to keep universal in the creation of ALL DORKS, is the concept of syntax. If I spoke English with a Chinese sentence structure, it wouldn’t make any sense. It’s the exact same to Google or Bing. If you don’t speak their language, they won’t understand you. ALWAYS …
