GHDB « Hackers For Charity

GHDB

GHDB

Google Search: inurl:guestbook/guestbooklist.asp “Post Date” From

jeffball55 rates this entry 6 out of 10.
Submitted: 2005-12-19 00:00:00
Added by: jeffball55
Hits: 1171
Score: 6

A sql vulnerability has been reported in a Techno Dreams asp script, login.asp. http://search.securityfocus.com/archive/1/414708/30/0/threadedSeveral ways of finding the vulnerable file:Guestbook (the above dork): inurl:guestbook/guestbooklist.asp “Post Date” From Country Results 1 – 21 of 123Announcement: inurl:MainAnnounce1.asp “show all” Results 1 -20 of 86WebDirectory: inurl:webdirectory “Total Available Web Sites” Search Results 1 – 4 of 5MailingList: inurl:maillinglist/emailsadd.asp Results 1 – 6 of 6note these dorks don’t find the vulnerable script; to find it change the url to /admin/login.asp or /login.asp.The default admin user/pass is admin/admin. Some results leave this info on the page and others load the page with this info already filled out.

Comments:


5 Responses to “GHDB”

  1. Jack says:
    October 26, 2011 at 9:12 pm

    Does GHDB still updates for now?

  2. Johnny says:
    October 27, 2011 at 3:31 am

    The GHDB is alive and well, updated through the ExploitDB: http://www.exploit-db.com/google-dorks.

  3. The Artist says:
    April 20, 2013 at 7:10 am

    Hi Johnny,been a while since I’ve came last. Aren’t you gonna update this website anymore???

  4. Johnny says:
    April 27, 2013 at 5:10 am

    The GHDB is not updated and lives with the exploitdb: http://http://www.exploit-db.com. Please check out the awesome folks at Offensive Security as well: http://www.offensive-security.com!

  5. Velmurugan says:
    May 7, 2013 at 7:38 am

    Is any offline view-able resources is available of this product ?

Leave a Reply