Find SQLI Vuln Sites __Nabil Rahman

Hi Guys,

In this article we gonna learn how to find sqli vulnerable sites.

For this, website need a parameter like php?id=2 or php?id=(any number)

For example:

http://www.example.com/products.php?id=5 www.example.com/products.php?id=5 <= This type of website is needed in order to perform sql injection.

For finding this types of websites, we are going to use a common method called "Google Dorking". If you don't have any idea about google dorking you can search on google about this.

Now move on. For example you need to find an Indian website which is Vulnerable to sql injection.For this, you need to use dork like this:

inurl:gallery.php?id= site:.in 

inurl:product.php?id= site:.in 

Note : 1 > The "inurl:" operator searches for specific text in the indexed URLs.

            2>  The "site:" operator is used to search for a specific site.

There is no limit in dork list, you can make your own google dork with keywords. Or you search on google for "New Google Dorks List for sql injection" you will get many results. 

Once you find a website, then you can check for SQLi vulnerability.

#Happy Hacking🎭