Dork Frequency q 5.5% s 4.5% search 1.9% id 1.7% lang 1.4% keyword 1.2% query 1.1% page 1.0% keywords 0.8% year 0.8% view 0.8% email 0.8% type 0.7% name 0.7% p 0.7% month 0.6% immagine 0.6% list_type 0.5% url 0.5% terms 0.5% categoryid 0.5% key 0.5% l 0.5% begindate 0.4% enddate 0.4% categoryid2 0.4% t 0.4% cat 0.4% category 0.4% action 0.4% bukva 0.4% redirect_uri 0.4% firstname 0.4% c 0.4% lastname 0.3% uid 0.3% startTime 0.3% eventSearch 0.3% categoryids2 0.3% categoryids 0.3% sort 0.3% positiontitle 0.3% groupid 0.3% m 0.3% message 0.3% tag 0.3% pn 0.3% title 0.3% orgId 0.3% text 0.3% handler 0.2% myord 0.2% myshownums 0.2% id_site 0.2% city 0.2% search_query 0.2% msg 0.2% sortby 0.2% produkti_po_cena 0.2% produkti_po_ime 0.2% mode 0.2% CODE 0.2% location 0.2% v 0.2% order 0.2% n 0.2% term 0.2% start 0.2% k 0.2% redirect 0.2% ref 0.2% file 0.2% mebel_id 0.2% country 0.2% from 0.1% r 0.1% f 0.1% field%5B%5D 0.1% searchScope 0.1% state 0.1% phone 0.1% Itemid 0.1% lng 0.1% place 0.1% bedrooms 0.1% expand 0.1% e 0.1% price 0.1% d 0.1% path 0.1% address 0.1% day 0.1% display 0.1% a 0.1% error 0.1% form 0.1% language 0.1% mls 0.1% kw 0.1% u 0.1%

Dork Frequency /?s= 3.6 /search?q= 2.5 /index.php?lang= 0.6 /pplay/info_prenotazioni.asp?immagine= 0.6 /shared/lgflsearch.php?terms= 0.5 /index.php?page= 0.4 /search?query= 0.4 /en/Telefon-Cam?search= 0.4 /index.php?bukva= 0.4 /pro/events_print_setup.cfm?list_type= 0.3 /pro/events_print_setup.cfm?categoryid= 0.3 /pro/events_print_setup.cfm?categoryid2= 0.3 /?eventSearch= 0.3 /?startTime= 0.3 /pro/events_ical.cfm?categoryids= 0.3 /pro/events_ical.cfm?categoryids2= 0.3 /pro/events_print_setup.cfm?month= 0.3 /pro/events_print_setup.cfm?year= 0.3 /pro/events_print_setup.cfm?begindate= 0.3 /pro/events_print_setup.cfm?enddate= 0.3 /search?keyword= 0.3 /?q= 0.3 /search/?q= 0.3 /index.php?pn= 0.3 /?lang= 0.3 /property/search?uid= 0.3 /index.php?id= 0.3 /search?orgId= 0.3 /products?handler= 0.2 /pro/events_print_setup.cfm?view= 0.2 /pro/events_print_setup.cfm?keywords= 0.2 /?p= 0.2 /search.php?q= 0.2 /?search= 0.2 /pro/minicalendar_detail.cfm?list_type= 0.2 /index.php?produkti_po_cena= 0.2 /index.php?produkti_po_ime= 0.2 /servlet/com.jsbsoft.jtf.core.SG?CODE= 0.2 /login?redirect_uri= 0.2 /connexion?redirect_uri= 0.2 /index.php?action= 0.2 /plugins/actu/listing_actus-front.php?id_site= 0.2 /index.php?mebel_id= 0.2 /search/?search= 0.2 /news/class/index.php?myshownums= 0.2 /news/class/index.php?myord= 0.2 /search.html?searchScope= 0.1 /search?field%5B%5D= 0.1 /videos?tag= 0.1 /videos?place= 0.1 /videos?search= 0.1 /?email= 0.1 /?cat= 0.1 /content.php?expand= 0.1 /?page= 0.1 /search/?s= 0.1 /?keywords= 0.1 /search/?keyword= 0.1 /apps/email/index.jsp?n= 0.1 /?name= 0.1 /?sort= 0.1 /search?search= 0.1 /pro/minicalendar_print_setup.cfm?begindate= 0.1 /pro/minicalendar_print_setup.cfm?enddate= 0.1 /pro/minicalendar_print_setup.cfm?keywords= 0.1 /search-results?q= 0.1 /?listingtypeid= 0.1 /search?s= 0.1 /pro/minicalendar_print_setup.cfm?categoryid2= 0.1 /?bathrooms= 0.1 /?listingagent= 0.1 /?featuredsearchseourl= 0.1 /?squarefeet= 0.1 /?siteid= 0.1 /?bedrooms= 0.1 /?featuredsearch= 0.1 /?price= 0.1 /?maxbuilt= 0.1 /?lsid= 0.1 /?listingtypes= 0.1 /?garages= 0.1 /?maxprice= 0.1 /?minprice= 0.1 /?keywordsany= 0.1 /?yearbuilt= 0.1 /?minbuilt= 0.1 /?subdivision= 0.1 /?lotsizeval= 0.1 /?listingstatusid= 0.1 /?mls= 0.1 /firms/?text= 0.1 /servlet/com.jsbsoft.jtf.core.SG?OBJET= 0.1 /plan_du_site.php?lang= 0.1 /index.php?Itemid= 0.1 /?view= 0.1 /?t= 0.1 /?selat= 0.1 /?selong= 0.1 /?nwlat= 0.1 /?geo= 0.1

It’s the end of the year and a good time to share things with people.After having scanned more than a million websites in order to find XSS and Open Redirect vulnerabilities, I took the time to do statistics on the most vulnerables parameters.It can be used as a powerful dork list so let’s update your scanners and get bounties!First here is the list of most vulnerable parameters along with their frequency.This second list is almost the same but with corresponding path :I hope you enjoy this 🙂