Searching vulnerable sites with Google

Lately, I noticed that "Google Bots" has been using our site and scanning thousand of hosts per day. You know what that means? Well, now you can google for vulnerable sites and it will show the results from our scanning tool. Just choose a vulnerable application (or version you are looking for) and restrict to site:http://sucuri.net.

For example:

<a href="http://www.google.com/search?hl=en&amp;as_q=&amp;as_epq=Server+nginx+&amp;as_oq=&amp;as_eq=&amp;num=10&amp;lr=&amp;as_filetype=&amp;ft=i&amp;as_sitesearch=sucuri.net&amp;as_qdr=all&amp;as_rights=&amp;as_occt=any&amp;cr=&amp;as_nlo=&amp;as_nhi=&amp;safe=images">Search Looking for all Nginx web servers</a>

<a href="http://www.google.com/search?hl=en&amp;lr=&amp;q=%22Server+nginx+%22+site%3Asucuri.net+%220.4%22&amp;aq=f&amp;oq=&amp;aqi=">Search Looking for all Nginx web servers running version 0.4</a>

<a href="http://www.google.com/#hl=en&amp;q=%22X-Powered-By%3A+PHP%22+site%3Asucuri.net&amp;aq=f&amp;aqi=&amp;oq=&amp;fp=cbc2f75bf9d43a8f">Search for all sites powered by PHP</a>

<a href="http://www.google.com/#hl=en&amp;q=site%3Asucuri.net+%22Wordpress+internal+path%22&amp;aq=f&amp;aqi=&amp;oq=&amp;fp=cbc2f75bf9d43a8f">Search for sites leaking the Wordpress internal path</a>

<a href="http://www.google.com/#hl=en&amp;q=site%3Asucuri.net+%22pointing+to+an+internal+IP+Address%22&amp;aq=f&amp;aqi=&amp;oq=&amp;fp=cbc2f75bf9d43a8f">Sites with their public DNS pointing to private IP addresses</a>

Note that Google just started scanning us that way (a few days ago), so the number of reported sites is likely to increase a lot in the next weeks...