+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: strange websites while dorking for sql dump files (/Thread-strange-websites-while-dorking-for-sql-dump-files)
strange websites while dorking for sql dump files - synec0ha - 01-24-2021
I was following along with a google dork tutorial that's focused on sql injections and I'm getting some strange results when I do the string
Code:
intitle:index of & filetype:sqledit: attempted to add an image but it's not letting me. maybe im too new?
I'm intrigued, to say the least. I'm sure its something simple and spammy, but Id love to know what someone thinks about this.
RE: strange websites while dorking for sql dump files - mothered - 01-24-2021
Thread moved from The Lounge forum to Website & Server Hacking.
RE: strange websites while dorking for sql dump files - synec0ha - 01-25-2021
(01-24-2021, 11:25 AM)mothered Wrote: Thread moved from The Lounge forum to Website & Server Hacking.Thank you!
RE: strange websites while dorking for sql dump files - mothered - 01-25-2021
(01-25-2021, 03:00 AM)synec0ha Wrote:You're welcome, easily done with a few clicks of the mouse.(01-24-2021, 11:25 AM)mothered Wrote: Thread moved from The Lounge forum to Website & Server Hacking.Thank you!
RE: strange websites while dorking for sql dump files - Num5kull - 01-25-2021
They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.
RE: strange websites while dorking for sql dump files - 6ix - 01-26-2021
(01-25-2021, 10:31 PM)Num5kull Wrote: They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.
Why would someone run this?
Just to harvest ip addresses? sounds pretty useless
RE: strange websites while dorking for sql dump files - synec0ha - 01-26-2021
lol I had a feeling I was being played. Good thing I always use a VPN. If it's a honeypot it could also be used for research. Ive actually found a few services that run dorking honeypot websites. Interesting topic.
RE: strange websites while dorking for sql dump files - Oni - 01-26-2021
(01-26-2021, 12:31 AM)6ix Wrote:(01-25-2021, 10:31 PM)Num5kull Wrote: They are google-dork honey pots harvesting ip addresses. Usually they accept any url and spit up random text at you.
Why would someone run this?
Just to harvest ip addresses? sounds pretty useless
I've always wondered what the incentive is for honeypots of this nature. If it was ran by a government entity, they would want to prove you were after unauthorized access. Spitting random text out won't prove anything of the sort. Perhaps these honeypots are designed to analyze particular behaviors?
RE: strange websites while dorking for sql dump files - synec0ha - 01-26-2021
(01-26-2021, 08:48 AM)Oni Wrote: I've always wondered what the incentive is for honeypots of this nature. If it was ran by a government entity, they would want to prove you were after unauthorized access. Spitting random text out won't prove anything of the sort. Perhaps these honeypots are designed to analyze particular behaviors?Ive done a bit of research, and It seems to be mostly security researchers who want to analyze behaviors, yes. I've found this paper that talks about setting up honeypots for google dorks and how they use them to learn more about dorking and what exactly people are searching for. They say that theyve set up many of these honeypot websites so I wouldn't be surprised if the ones I found were actually set up by the researchers. Super interesting stuff!
RE: strange websites while dorking for sql dump files - synec0ha - 01-27-2021
Actually, I think I've found the people behind the websites I've been finding. These people have detailed all sorts of honeypots (not just dorking related) that they use to track patterns and attacks. I think it would be a neat learning experience to hack into these honeypots.