GHDB « Hackers For Charity

GHDB

GHDB

Google Search: intitle:osCommerce inurl:admin intext:”redistributable under the GNU”intext:”Online Catalog” -demo -site:oscommerce.com

James rates this entry 8 out of 10.
Submitted: 2004-03-04 14:36:03
Added by: James
Hits: 10661
Score: 8

This is a decent way to explore the admin interface of osCommerce e-commerce sites. Depending on how bad the setup of the web store is, web surfers can even Google their way into customer details and order status, all from the Google cache.

Comments:

2004-05-04 12:40:35 (amar): it is insane how many servers out jus gave u admin rights with that google search query..

2004-05-20 11:19:46 (squattingRadish): omg what a f*cking mad search

2004-06-24 19:54:59 (Cyben): Johnny, this is a great find, hence my scoring it 10, but I do not think it’s prudent to have it so balantly visible on your website: not for your sake, but for the sake of tons of innocent people. osCommerce stores credit card numbers.

2004-07-28 10:36:59 (j0hnny): cyben-

I agree with you but this search does not reveal customer info. It take quite a bit more to actually get to that point.

j0hnny

2005-01-13 10:12:34 (star): This is really great johnny and can any one tell me where to look for customers info.

2005-01-13 10:13:02 (star): This is really great johnny and can any one tell me where to look for customers info.

2005-02-04 20:38:40 (zawa): i think this search procedure has as a result to show us the web sites that are still default settings .

2005-06-04 13:35:49 (droidman): Try this
—————–
intitle:osCommerce inurl:admin intext:”redistributable under the GNU”intext:”Online Catalog” -site:oscommerce.com CC#
—————–

2005-11-12 06:50:17 (calinicegirl): intitle:osCommerce inurl:admin intext:”Administration”intext:”Customers” -demo -site:oscommerce.com

That will get you into the Admin Panel to some of them that came up on goggle. Once you get there, just navigate where you want to go. I found soem customer lists with it.

2005-11-17 21:36:24 (mrc0de): Posted by Cyben on Jun 24, 2004 – 07:54 PM
My score: Reviewer Rated 5 StarsReviewer Rated 5 StarsReviewer Rated 5 StarsReviewer Rated 5 StarsReviewer Rated 5 Stars
Johnny, this is a great find, hence my scoring it 10, but I do not think it’s prudent to have it so balantly visible on your website: not for your sake, but for the sake of tons of innocent people. osCommerce stores credit card numbers


Bah! FULL DISCLOSURE!


5 Responses to “GHDB”

  1. Jack says:
    October 26, 2011 at 9:12 pm

    Does GHDB still updates for now?

  2. Johnny says:
    October 27, 2011 at 3:31 am

    The GHDB is alive and well, updated through the ExploitDB: http://www.exploit-db.com/google-dorks.

  3. The Artist says:
    April 20, 2013 at 7:10 am

    Hi Johnny,been a while since I’ve came last. Aren’t you gonna update this website anymore???

  4. Johnny says:
    April 27, 2013 at 5:10 am

    The GHDB is not updated and lives with the exploitdb: http://http://www.exploit-db.com. Please check out the awesome folks at Offensive Security as well: http://www.offensive-security.com!

  5. Velmurugan says:
    May 7, 2013 at 7:38 am

    Is any offline view-able resources is available of this product ?

Leave a Reply