(question) how to make a targeted dorks for specific sites?

(question) how to make a targeted dorks for specific sites? - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: (question) how to make a targeted dorks for specific sites? (/Thread-question-how-to-make-a-targeted-dorks-for-specific-sites)

Pages: 1 2

RE: (question) how to make a targeted dorks for specific sites? - cupopigi - 08-20-2018

(08-19-2018, 02:32 PM)tschaikowsky Wrote: First of all you have to read and Understand what are Dorks doing

Thanks for your reply.
Yeah I studied about it but the thing is
I still get shitty websites using dorks and com bo (which is not even a lot).

I need some serious help/ tips on how to get quality com bo using private dorks.

RE: (question) how to make a targeted dorks for specific sites? - cupopigi - 08-20-2018

ok, what I did was I found this dorks below from google (youtube)
and ran sqli dump.

https://pastebin.com/fUA6v99E

I expected to get lots of com.bos but it was just not that much and the result was shitty.

anyone can teach me how to get private dork/com,bos?

RE: (question) how to make a targeted dorks for specific sites? - mothered - 08-20-2018

I suggest learning to Identify and exploit manually, by using (depending on the attack vector) Union-Based, Boolean-Based, or the most common being Error-Based SQLi attacks. Content-Based (Blind) Is also of benefit. Circumventing WAFs and IDS/IPS (where warranted) Is also vital.

At the minimum, proficiency In SQL Is paramount. PHP Is also of significant Importance. I've yet to utilize a single tool and as recent as an hour ago, I have full raid on a major metal manufacturer company that I was targeting for a few days.

Apart from my entry, for security purposes, details have been concealed.

Spoiler:

Spoiler:

A database dump Is on the way.

RE: (question) how to make a targeted dorks for specific sites? - cupopigi - 08-20-2018

Thanks a lot.
Will study as you guide.

RE: (question) how to make a targeted dorks for specific sites? - tschaikowsky - 08-20-2018

(08-20-2018, 07:27 AM)cupopigi Wrote: Thanks a lot.
Will study as you guide.

Dorking is a good thing, but with Dorks you never get High Level targets, with Dorks you find only GET Para Injections, but good Injections are in the Post Parameter and you cant dork them

RE: (question) how to make a targeted dorks for specific sites? - cupopigi - 08-20-2018

(08-20-2018, 08:55 AM)tschaikowsky Wrote: Dorking is a good thing, but with Dorks you never get High Level targets, with Dorks you find only GET Para Injections, but good Injections are in the Post Parameter and you cant dork them

Can you tell me what’s para injection and post injection?
There’s so many things to study haha
Thanks in advance.

RE: (question) how to make a targeted dorks for specific sites? - tschaikowsky - 08-20-2018

Yeah its much to learn and read...

For understanding HTTP/GET/POST/HEAD read this article
https://www.w3schools.com/tags/ref_httpmethods.asp

##edit; i have posted a Tutorial Package here
https://sinister.li/Thread-Tutorial-SQL-Injection-Pack-by-Ziegenpeter

RE: (question) how to make a targeted dorks for specific sites? - cupopigi - 08-20-2018

(08-20-2018, 01:49 PM)tschaikowsky Wrote: Yeah its much to learn and read...

For understanding HTTP/GET/POST/HEAD read this article

##edit; i have posted a Tutorial Package here

Really appreciate! Smile