[Shad0w Warr10r]

first of all this is for newbie who have problems finding vulnerable websites.

- The important thing is : To Be Creative !
Why you need to be creative??
Well if we take an example of this dork "inurl:members.php?id=" a lot of people are using it so probly if you use it you'll just find your self trying to hack a website that is already hacked or the database its fucked even if you think about skiping to the page rank 100+ well you're not the only one who thought about this idea, anyway the meaning of Be creative is to add some keywords to your dorks for example "inurl:members.php?id= shop" this dork can be useful if you're trying to get some credit card numbers.

********************************************

The second thing is when you google one of your dorks try to change the results date, area etc when you type search see at the left of the page you'll find some options like tools then its easy to understand this is for finding websites never been hacked.
There is a lot of methods to get your skills better all what you need is reading tutorials, and others opinions and the key of success is to be patient.

************************************************** *

Now the methode to get 90% vulnerable websites is to use these dorks <=
I am sure some of you already know this like I am sure there's some who don't know about it so as i said its for newbie.

Take one of the following dorks and google it then go to page rank 10 or +
and choose a website these dorks will show you the error which means that the website is vulnerable =>

Code:

inurl:"id=" & intext:"Warning: mysql_fetch_assoc() inurl:"id=" & intext:"Warning: mysql_fetch_array() inurl:"id=" & intext:"Warning: mysql_num_rows() inurl:"id=" & intext:"Warning: session_start() inurl:"id=" & intext:"Warning: getimagesize() inurl:"id=" & intext:"Warning: is_writable() inurl:"id=" & intext:"Warning: getimagesize() inurl:"id=" & intext:"Warning: Unknown() inurl:"id=" & intext:"Warning: session_start() inurl:"id=" & intext:"Warning: mysql_result() inurl:"id=" & intext:"Warning: pg_exec() inurl:"id=" & intext:"Warning: mysql_result() inurl:"id=" & intext:"Warning: mysql_num_rows() inurl:"id=" & intext:"Warning: mysql_query() inurl:"id=" & intext:"Warning: array_merge() inurl:"id=" & intext:"Warning: preg_match() inurl:"id=" & intext:"Warning: ilesize() inurl:"id=" & intext:"Warning: filesize() inurl:"id=" & intext:"Warning: filesize() inurl:"id=" & intext:"Warning: require()

--Code tags added--
---------Psycho_Coder

[shtefcs]

Tnx for sharing, just what i was looking. And how to find .edu and .gov sites ?

Btw, sorry for noobish question, but how to access to sites which we found ?

[par†ian]

Tnx for sharing, just what i was looking. And how to find .edu and .gov sites ?

I would HIGHLY recommend you DO NOT hack into .edu and/or .gov sites,
both are owned by the government and if you're not 100% anon, you're fucked!

If you're new to hacking into websites, don't even touch those domains.

[Faner]

Funny thing is, that these government websites usually has many very obvious vulnerabilities. So if you want some attention, by defacing one of those websites you will definitely achieve it...

[hunt3r972]

These vulnerabilities must be hacker traps. I don't think that the programmers are idiot enough to let these faults opened ^^

[hunt3r972]

These vulnerabilities must be hacker traps. I don't think that the programmers are idiot enough to let these faults opened ^^

[Red Dragon]

Government sites open too. But I would not recommend hacking, even if you use a proxy you a very high chance of finding. I think you should try to hack child porn sites: Cool:

Tnx for sharing, just what i was looking. And how to find .edu and .gov sites ?

Btw, sorry for noobish question, but how to access to sites which we found ?

[Red Dragon]

Government sites open too. But I would not recommend hacking, even if you use a proxy you a very high chance of finding. I think you should try to hack child porn sites: Cool:

Tnx for sharing, just what i was looking. And how to find .edu and .gov sites ?

Btw, sorry for noobish question, but how to access to sites which we found ?

[zomgwtfbbq]

These vulnerabilities must be hacker traps. I don't think that the programmers are idiot enough to let these faults opened ^^

Yes, they are called honeypots. It's comparable with the so-called deals on the internet and irl: if it's too good to be true, there's probably something fishy going on.

[zomgwtfbbq]

These vulnerabilities must be hacker traps. I don't think that the programmers are idiot enough to let these faults opened ^^

Yes, they are called honeypots. It's comparable with the so-called deals on the internet and irl: if it's too good to be true, there's probably something fishy going on.