[synec0ha]

I was following along with a google dork tutorial that's focused on sql injections and I'm getting some strange results when I do the string

Code:

intitle:index of & filetype:sql

The websites are mostly just IP's, and they all look like this: with mostly nonsense. Ive found at least 10 that are exactly like this but with different posts.

edit: attempted to add an image but it's not letting me. maybe im too new?

I'm intrigued, to say the least. I'm sure its something simple and spammy, but Id love to know what someone thinks about this.

[mothered]

Thread moved from The Lounge forum to Website & Server Hacking.

[synec0ha]

Thread moved from The Lounge forum to Website & Server Hacking.

Thank you!

[mothered]

Thread moved from The Lounge forum to Website & Server Hacking.

Thank you!

You're welcome, easily done with a few clicks of the mouse.

[Num5kull]

They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.

[6ix]

They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.

Why would someone run this?
Just to harvest ip addresses? sounds pretty useless

[synec0ha]

lol I had a feeling I was being played. Good thing I always use a VPN. If it's a honeypot it could also be used for research. Ive actually found a few services that run dorking honeypot websites. Interesting topic.

[Oni]

They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.

Why would someone run this?
Just to harvest ip addresses? sounds pretty useless

I've always wondered what the incentive is for honeypots of this nature. If it was ran by a government entity, they would want to prove you were after unauthorized access. Spitting random text out won't prove anything of the sort. Perhaps these honeypots are designed to analyze particular behaviors?

[synec0ha]

I've always wondered what the incentive is for honeypots of this nature. If it was ran by a government entity, they would want to prove you were after unauthorized access. Spitting random text out won't prove anything of the sort. Perhaps these honeypots are designed to analyze particular behaviors?

Ive done a bit of research, and It seems to be mostly security researchers who want to analyze behaviors, yes. I've found this paper that talks about setting up honeypots for google dorks and how they use them to learn more about dorking and what exactly people are searching for. They say that theyve set up many of these honeypot websites so I wouldn't be surprised if the ones I found were actually set up by the researchers. Super interesting stuff!

[synec0ha]

Actually, I think I've found the people behind the websites I've been finding. These people have detailed all sorts of honeypots (not just dorking related) that they use to track patterns and attacks. I think it would be a neat learning experience to hack into these honeypots.