Hacking a Government and Schools Website using SQL INJECTION

Have you ever thought of finding Sql injection vulnerable website by it domain using some Google dorks? I came across a Google dork online in which you can use to find specific vulnerable Sql websites.



For example, take a look at this dork. inurl:."domain"/"dorks" I'll explain how it works. "inurl" simply means input URL "domain" simply means your desired domain e.g. .gov "dorks" simply means your dork of your choice Hope you are following? Now Let assume you want to find Vulnerable Sql government websites. The dork to use will simply be inurl:.gov/index.php?id= Once you input that in Google, You will find a lot of government websites vulnerable to Sql injection. Here are some other dorks and their uses inurl:.edu/index.php?id= used to find vulnerable college or university websites inurl:.in/index.php?id= used to find vulnerable India websites inurl:.us/index.php?id= used to find vulnerable united state of America websites. After you find your desired website, simply add an apostrophe ( ' ) to the end of the url to know if truly it 100% vulnerable. Example: http://www.website.com/category.php?id=5' If the site is vulnerable, You would see some sql error message. Now use havij Sql tool to begin your defacing. How to use havij to deface a website

Thanks For Making This Possible! Kindly Bookmark and Share it.