Error-based Fingerprinting

Error-based Fingerprinting

Copy# MySQL Errors
site:*.domain.com intext:"You have an error in your SQL syntax"
site:*.domain.com intext:"mysql_fetch_array() expects parameter"
site:*.domain.com intext:"mysql_num_rows() expects parameter"
site:*.domain.com intext:"supplied argument is not a valid MySQL result resource"
site:*.domain.com intext:"Warning: mysql_"
site:*.domain.com intext:"Fatal error: Uncaught mysqli_sql_exception"

# MariaDB / PDO Errors
site:*.domain.com intext:"Fatal error: Call to undefined function mysql_connect()"
site:*.domain.com intext:"Warning: PDO::query()"
site:*.domain.com intext:"SQLSTATE[HY000]"

# PostgreSQL Errors
site:*.domain.com intext:"pg_query(): Query failed"
site:*.domain.com intext:"Warning: pg_connect()"
site:*.domain.com intext:"PostgreSQL query failed: ERROR"

# Microsoft SQL Server Errors
site:*.domain.com intext:"Microsoft OLE DB Provider for SQL Server"
site:*.domain.com intext:"Unclosed quotation mark after the character string"
site:*.domain.com intext:"ADODB.Field error"
site:*.domain.com intext:"80040e14"

# Oracle DB Errors
site:*.domain.com intext:"ORA-00933: SQL command not properly ended"
site:*.domain.com intext:"ORA-01756: quoted string not properly terminated"
site:*.domain.com intext:"Warning: oci_parse()"

# DB2 / Informix / Misc
site:*.domain.com intext:"DB2 SQL error:"
site:*.domain.com intext:"Syntax error in string in query expression"
site:*.domain.com intext:"Error Executing Database Query"

# Generic SQL Error Patterns
site:*.domain.com intext:"Query failed:"
site:*.domain.com intext:"unexpected end of SQL command"
site:*.domain.com intext:"invalid SQL statement"
site:*.domain.com intext:"JDBC Exception"

Find Exposed Database Dumps or Config Files

Last updated