Trawling for Bugs – Using Google Dorks and Python for SQLi Discovery

Using sqlmap requires a URL to target—one that will contain testable parameters. This next technique can be used to target specific applications and form inputs—like sqlmap does—or to simply return a list of sites susceptible to SQLi vulnerabilities.

Google Dorks for SQLi

Using Google Dorks—sometimes called Google hacking—means employing specially-crafted search queries to get search engines to return sites susceptible to SQLi and other vulnerabilities. The name Google dork refers to a hapless employee misconfiguring their site and exposing sensitive corporate information online.

Here are a few examples of common...