Other nomination

Google Dorks Strike Again

Stephen de Vries' Google Code Search dorks for XSS and SQL injection in Java applications, quoted in full: <%=.*getParameter for unescaped output, executeQuery.*getParameter for query construction, and a package filter aimed at book publishers' sample code. Searching all public source approximates a poor man's static analysis at internet scale.

In the archive

• Nominated for the 2006 Top 10 Web Hacking Techniques

Tags

• large-scale-scan
• static-analysis
• xss
• sqli
• java
• info-leak
• tooling
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.