Footprinting In Kali Linux

Question 1

How to find websites vulnerable to user input sql injection

Go to notes to see pictures

Answer 1

Just type this and this will have tons of sites vulnerable to sql injection

iInurl: “index.php?id=“

Search that on google open Firefox and look up google

It will find all the websites that have that at the end with some random number

So all those websites if you click on one you will be able to do an sql injection on any of them or most of them this one is not vunerable

It’s not vulnerable because when you type an ‘ in the it says that error code there

So basicly if it can proceed some random stuff you type then it’s is vulnerable

Question 2

What is the google hacking database

Go to notes to see pictures

Answer 2

well if you open Firefox and type in google.com and then type in google hacking data base you will see the exploit db website at the top probally

So what this does is you click on the on at the top looks like this

And then after taht you click on it then after that you will see google hacking exploits

If you click on any of the blue links those will take you to the place where you get the command you put in the google search bar

It will also have a description of what it does when you click on the blue link and the page loads scroll down a little and it will tell you what it does

After that you copy the command on the smae page the description is on its above the description

So wanse you copy the command go to the google.com agian and paste it in the search bar and it will find websites like the description said it would here’s some photos of what to do
Look up google.com first then lookup google hacking data base should look like this

After that you click on exploit db

As you can see all the blue links now just choose one and then click it and then it will look something like this

Your page will look like that above you can see the description to its says pages containing portal logins that what it finds so after that you then you copy this part
After that look up google.com on a new tab

And then paste the command in a search bar and it will pull up possible websites with that vunerbilite

Then you can choose any of those you want to attack

By the way if you didn’t know on the google exploit database website you can search things in the top right so if you want a certain kinda website like a website with pdf file

It’s that simple