What is Google Dork?

-
These are specialized keywords to get internal information's about the website or server ,that are accessible by google crawlers (" also known as spiders") since these web developers are not serious about security about their site content.
In simple words, we can access them by using some special google keywords
these keywords include
indexof: , site: , filetype: , inurl: , intitle: , intext: etc
It also used by hackers,looking for files containing the usernames and passwords
filetype:conf inurl:proftpd.conf -sample
Files with Passwords Examples,
inurl:”editor/list.asp” | inurl:”database_editor.asp” | inurl:”login.asa” “are set”
ext:yml database inurl:config
inurl:”Sites.dat”+”PASS=”
filetype:ini “pdo_mysql” (pass|passwd|password|pwd)
inurl:config/databases.yml -trac -trunk -“Google Code” -source -repository
“login: *” “password= *” filetype:xls
These Techniques are mostly used by Security Experts to find SQL INJECTION VULNERABILITIES in their sites. 
Thank you and Stay safe.

Comments

Post a Comment

Popular posts from this blog

What are the best ways to earn money online?

-
Image
How many articles are there about making money online? Thousands? Millions? Enough? Probably. But there’s a problem. Too many of them are just sales pitches to convince you to sign up for some seminar, webinar, training session or some other way to become an online millionaire. They really give online money making a bad name. But it is possible to make money online. I mean, the people selling all of those millionaire pitches are making money, right? There are legitimate ways to make money online. The problem is that the real ways to make money aren’t “get rich quick” schemes. Most of them require a lot of work and sometimes a lot of dedication before seeing a return on your time. But if you really want to make money online, work from home or turn an idea into a business, you  can  do it. I’m going to tell you about all kinds of legitimate ways to make money online. Since we are talking about  legitimate  jobs, you’ve got to be…well, legitimate. Many of th...
Read more

What is the best way to start learning ethical hacking and cyber security from beginning?

-
Image
The best way to start learning this, is to start right from basics. And for these specific fields, you need to have basics of Networking and related concepts as well as basics of all possible programing languages and technologies. Just, get hands-on first with networking and then you can move on to the next step as it could be like certifications on ethical hacking or security analysis. Penetration testing is also a part of this field as it can be learned after successful completion of ethical hacking, etc. Once you are done with ethical hacking, all you will need to have is to be getting hands-on with day to day technologies and this will enhance more skill and capabilities to your career. As soon as you will pursue certification or course for ethical hacking, you will have basic idea about number of different phases of ethical hacking and then you can move forward with each phase with your comfort. However, it is always better to think twice before joining any course that offers e...
Read more

Are iPhones safe from virus attacks??

-
Image
In June 2012, Mikko Hypponen, an anti-virus veteran, shared an exciting tweet which said — “iPhone is 5 years old today. After 5 years, not a single serious malware case. It’s not just luck; we need to congratulate Apple on this.” It is a matter of time. During the past couple months, things have changed considerably. Most of us may not agree to this in the present day. Let’s look at  Why! Global Ransomware Outbreak In the last two months, with the outbreak of the global cyber-attack crippling Windows-based systems, every user be it for Windows or Mac are now left wondering how secure they are in reality?                WannaCry and Petya: Their Impact The reason being, these severe vulnerabilities—WannaCry,                  Up till date, these are considered as the worst ransomware attack for Windows users. Though these ransomware does not affect the Mac system yet, it does n...
Read more