Full Disclosure mailing list archives

Finding page including parameters with google dorks


From: rai () openmailbox org
Date: Fri, 04 Jul 2014 11:01:10 +0200

Hi,

Here's a google dork that doesn't seem to be listed anywhere but gets some good results:

inurl:"index.php?page="

Inside that parameter, there can be straightforward lfi's, rfi's but also subtle things too. The search does bring in a lot of false positives, so looking for urls ending with extensions helps.

http://maker.fea.st/startpage-dork.jpeg

(yes, i prefer startpage dork'ing)

Is there way of restricting to the search (wishfully thinking) to something like the below?

inurl:"index.php?page=*.(php|html|etc)"

--
rai





_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Current thread: