Google Dork For "Remote File Inclusion"

Google dorks are the center of the Google Hacking. Many hackers use google to find vulnerable webpages and later use these vulnerabilities for hacking.

Remote File Inclusion (RFI) is a type of vulnerability most often found on websites. It allows an attacker to include a remote file, usually through a script on the web server. The vulnerability occurs due to the use of user-supplied input without proper validation.

List Of Google Dork For Remote File Inclusion:
  • inurl:rte/my_documents/my_files
  • inurl:/my_documents/my_files/
  • inurl:/shoutbox/expanded.php?conf=
  • inurl:/main.php?x=
  • inurl:/myPHPCalendar/admin.php?cal_dir=
  • inurl:/index.php/main.php?x=
  • inurl:/index.php?include=
  • inurl:/index.php?x=
  • inurl:/index.php?open=
  • inurl:/index.php?visualizar=
  • inurl:/template.php?pagina=
  • inurl:/index.php?pagina=
  • inurl:/index.php?inc=
  • inurl:"index.php?page=contact.php"
  • inurl:"template.php?goto="
  • inurl:"video.php?content="
  • inurl:"pages.php?page="
  • inurl:"index1.php?choix="
  • inurl:tinybrowser/upload.php
  • inurl:examples/uploadbutton.html
  • inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=
  • inurl:/include/new-visitor.inc.php?lvc_include_dir=
  • inurl:/_functions.php?prefix=
  • inurl:/cpcommerce/_functions.php?prefix=
  • inurl:/modules/coppermine/themes/default/theme.php?THEME_DIR=
  • inurl:/modules/agendax/addevent.inc.php?agendax_path=
  • inurl:/ashnews.php?pathtoashnews=
  • inurl:/eblog/blog.inc.php?xoopsConfig[xoops_url]=
  • inurl:/pm/lib.inc.php?pm_path=
  • inurl:/b2-tools/gm-2-b2.php?b2inc=
  • inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=
  • inurl:/modules/agendax/addevent.inc.php?agendax_path=
  • inurl:/includes/include_once.php?include_file=
  • inurl:/e107/e107_handlers/secure_img_render.php?p=
  • intitle:index of? inurl:kindeditor

How to Use Google Dork For Remote File Inclusion:
  1. Copy anyone of the Google dork from above list
  2. Paste it in Google Search textbox and click Search
  3. Now, the Vulnerable Websites are listed in search result
  4. Click anyone of the link,You will find upload option on it 
  5. Now, you can upload your files like Images,HTML files,Document,Shell,RAT,etc.. ,
This is a simple method to find Remote File Inclusion(RFI) Vulnerable Websites using Google Dork. For an hacker google is not only a search engine its also a tool for hacking. Thank you!!
 

Comments

  1. Equally, you can click on the Fight Pass case in the pre-match menu that provides more information on what you can get if you buy one. The Clash Card is compelling first season, which itself lasts for a few months. salsaroc.com Fortnite Generator

    ReplyDelete

Post a Comment

Popular posts from this blog

How to Install Android OS in Your Computer?

Colasoft MAC Scanner (hack tools)