GoogleHack
Senin, 10 September 2007
|
Hatta Alttada arama kodlarını verım bari
"A syntax error has occurred" filetype:ihtml
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
"access denied for user" "using password"
"Can’t connect to local" intitle:warning
"detected an internal error [IBM][CLI Driver][DB2/6000]"
"Fatal error: Call to undefined function"
"Incorrect syntax near"
"ORA-00933: SQL command not properly ended"
"PostgreSQL query failed: ERROR: parser: parse error"
"Supplied argument is not a valid MySQL result resource"
"Syntax error in query expression "
"Unclosed quotation mark before the character string"
"Warning: Cannot modify header information - headers already sent"
An unexpected token "END-OF-STATEMENT" was found
Coldfusion Error Pages
filetype:asp "Custom Error Message" Category Source
Internal Server Error
intitle:"Error Occurred" "The error occurred in" filetype:cfm
intitle:"Execution of this script not permitted"
intitle:"Under construction" "does not currently have"
MYSQL error message: supplied argument....
mysql error with query
ORA-00921: unexpected end of SQL command
ORA-00936: missing expression
sitebuildercontent
sitebuilderfiles
sitebuilderpictures
SQL syntax error
Supplied argument is not a valid PostgreSQL result
warning "error on line" php sablotron
Kullanıcı İsimleri-Açıklama yapmaya gerek var mı? Kullanıcı isimlerini buluyor.
"index of" / lck
+intext:"webalizer" +intext:"Total Usernames" +intext:"Usage Statistics for"
bash_history files
filetype
f inurlroftpd.conf -sample
filetype:log username putty
filetype:reg reg +intext:"internet account manager
filetype:reg reg HKEY_CURRENT_USER username
index.of perform.ini
inurl:admin filetype:asp inurl:userlist
inurl:admin inurl:userlist
inurlhp inurl:hlstats intext:"Server Username"
sh_history files
Şifreler-En önemli ayrıntılar...
allinurl: admin mdb
auth_user_file.txt
config.php
eggdrop filetype:user user
etc (index.of)
filetype:cfm "cfapplication name" password
filetypef slapd.conf
filetype:dat "password.dat"
filetype:inc intext:mysql_connect
filetype:log inurl:"password.log"
filetypeem intextrivate
filetyperoperties inurl:db intextassword
filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"
filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS
filetype:url +inurl:"ftp://" +inurl:";@"
filetype:xls username password email
htpasswd
htpasswd / htgroup
htpasswd / htpasswd.bak
intitle:"index of" intextnect.inc
intitle:"index of" intext:globals.inc
intitle:index.of administrators.pwd
intitle:Index.of etc shadow
intitle:index.of secring.pgp
inurl:"wvdial.conf" intext:"password"
inurlfig.php dbuname dbpass
inurlerform filetype:ini
inurl:vtund.conf intextass -cvs
master.passwd
mysql history files
passlist
passlist.txt (a better way)
passwd
passwd / etc (reliable)
people.lst
PGP Keys
pwd.db
spwd.db / passwd
trillian.ini
İlginç bilgiler: kullanıcı ismi ve şifre yok ama site hakkında önemli bilgilere ulaşabilirsiniz
"#mysql dump" filetype:sql
"generated by wwwstat"
"Host Vulnerability Summary Report"
"HTTP_FROM=googlebot" googlebot.com "Server_Software="
"Index of" / "chat/logs"
"Mecury Version" "Infastructure Group"
"Most Submitted Forms and Scripts" "this section"
"Network Vulnerability Assessment Report"
"not for distribution" confidential
"phpMyAdmin" "running on" inurl:"main.php"
"produced by getstats"
"Request Details" "Control Tree" "Server Variables"
"robots.txt" "Disallow:" filetype:txt
"robots.txt" "Disallow:" filetype:txt
"Running in Child mode"
"Thank you for your order" +receipt
"This is a Shareaza Node"
"This report was generated by WebLog"
AIM buddy lists
allinurl:/examples/jsp/snp/snoop.jsp
allinurl:servlet/SnoopServlet
cgiirc.conf
cgiirc.conf
filetype:blt blt +intext:screenname
filetypef inurl:firewall -intitle:cvs
filetype:eml eml +intext:"Subject" +intext:"From" +intext:"To"
filetype:lic lic intext:key
filetype:log access.log -CVS
filetype:mbx mbx intext:Subject
filetype:wab wab
haccess.ctl
ICQ chat logs, please...
iletype:log cron.log
intext:"Tobias Oetiker" "traffic analysis"
intitle:"Big Sister" +"OK Attention Trouble"
intitle:"index of" mysql.conf OR mysql_config
intitle:"statistics of" "advanced web statistics"
intitle:"System Statistics" +"System and Network Information Center"
intitle:"Usage Statistics for" "Generated by Webalizer"
intitle:"wbem" compaq login
intitle:admin intitle:login
intitle:index.of "Apache" "server at"
intitle:index.of cleanup.log
intitle:index.of dead.letter
intitle:index.of inbox
intitle:index.of inbox dbx
intitle:index.of ws_ftp.ini
intitle:intranet inurl:intranet +intext:"phone"
inurl:"/cricket/grapher.cgi"
inurl:"cacti" +inurl:"graph_view.php" +"Settings Tree View" -cvs -RPM
inurl:"newsletter/admin/"
inurl:"newsletter/admin/" intitle:"newsletter admin"
inurl:"smb.conf" intext:"workgroup" filetypef conf
inurl:admin filetype:xls
inurl:admin intitle:login
inurl:cgi-bin/printenv
inurl:changepassword.asp
inurl:fcgi-bin/echo
inurl:main.php phpMyAdmin
inurl:main.php Welcome to phpMyAdmin
inurlerl/printenv
inurlhp.ini filetype:ini
inurl:server-info "Apache Server Information"
inurl:server-status "apache"
inurl:tdbin
inurl:vbstats.php "page generated"
ipsec.conf
ipsec.secrets
ipsec.secrets
mt-db-pass.cgi files
mystuff.xml - Trillian data files
"phpinfo.php" -manual
"# phpMyAdmin MySQL-Dump" "INSERT INTO" -"the"
intitle:index.of robots.txt
site:edu admin grades
"# Dumping data for table"
"cacheserverreport for" "This analysis was produced by calamaris"
+htpasswd +WS_FTP.LOG filetype:log
intitle:admin intitle:login
Login Portalları-sisteme giriş kapıları
"please log in"
"VNC Desktop" inurl:5800
"Web Control Panel" "Enter your password here"
allinurl:"exchange/logon.asp"
intitle:"ColdFusion Administrator Login"
intitle:"Dell Remote Access Controller"
intitle:"MikroTik RouterOS Managing Webpage"
intitle:"Remote Desktop Web Connection" inurl:tsweb
inurl:":10000" intext:webmin
inurl:/admin/login.asp
inurl:/Citrix/Nfuse17/
inurl:citrix/****framexp/default/login.asp
inurl:login filetype:swf swf
inurl:login.asp
inurl:login.cfm
inurl:names.nsf?opendatabase
url:webadmin" filetype:nsf
Network bilgileri, firewall log’ları, IDS kayıtları
"Network Host Assessment Report" "Internet Scanner"
"SnortSnarf alert page"
"This file was generated by Nessus"
"This report lists" "identified by Internet Scanner"
filetypedf "Assessment Report" nessus
filetype:vsd vsd network -samples -examples
inurlhpSysInfo/ "created by phpsysinfo"
Önemli Klasörler
"index of cgi-bin"
"index of" inurl:recycler
"Welcome to phpMyAdmin" " Create new database"
index.of.password
intitle:"Index of c:Windows"
intitle:"Index of" cfide
intitle:"index.of.personal"
intitle:intranet inurl:intranet +intext:"human resources"
inurl:/pls/sample/admin_/help/
inurl:/tmp
inurl:backup intitle:index.of inurl:admin
inurl:j2ee/examples/jsp
inurljspdemos
"Index of /backup"
index.of.private
index.of.protected
index.of.secret
index.of.secure
index.of.winnt
Güvenlik Açığı Olan Sunucular
"Select a database to view" intitle:"filemaker pro"
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"YaBB SE Dev Team"
allinurl:install/install.php
allinurl:intranet admin
Gallery in configuration mode
Hassan Consulting’s Shopping Cart Version 1.18
intitle:"Gateway Configuration Menu"
intitle:"osCommerce" inurl:admin filetypehp
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
inurl:footer.inc.php
inurl:info.inc.php
inurl:ManyServers.htm
inurlls/admin_/gateway.htm
inurl:search.php vbulletin
Web sunucularını öğrenmek
"seeing this instead" intitle:"test page for apache"
aboutprinter.shtml (More Xerox printers on the web!)
allintitle:Netscape FastTrack Server Home Page
intitle:"Apache HTTP Server" intitle:"documentation"
intitle:"Welcome to IIS 4.0"
index_i.shtml Ready (Xerox printers on the web!)
intitle:"300 multiple choices"
intitle:"Test Page for Apache"
intitle:"Test Page for Apache" "It Worked!"
intitle:"Test Page for Apache" "It Worked!" "on this web"
intitle:Snap.Server inurl:Func=
inurl:domcfg.nsf
inurl:tech-support inurl:show Cisco
"A syntax error has occurred" filetype:ihtml
"access denied for user" "using password"
"A syntax error has occurred" filetype:ihtml
"access denied for user" "using password"
"Can’t connect to local" intitle:warning
"detected an internal error [IBM][CLI Driver][DB2/6000]"
"Fatal error: Call to undefined function"
"Incorrect syntax near"
"ORA-00933: SQL command not properly ended"
"PostgreSQL query failed: ERROR: parser: parse error"
"Supplied argument is not a valid MySQL result resource"
"Syntax error in query expression "
"Unclosed quotation mark before the character string"
"Warning: Cannot modify header information - headers already sent"
An unexpected token "END-OF-STATEMENT" was found
Coldfusion Error Pages
filetype:asp "Custom Error Message" Category Source
Internal Server Error
intitle:"Error Occurred" "The error occurred in" filetype:cfm
intitle:"Execution of this script not permitted"
intitle:"Under construction" "does not currently have"
MYSQL error message: supplied argument....
mysql error with query
ORA-00921: unexpected end of SQL command
ORA-00936: missing expression
sitebuildercontent
sitebuilderfiles
sitebuilderpictures
SQL syntax error
Supplied argument is not a valid PostgreSQL result
warning "error on line" php sablotron
Kullanıcı İsimleri-Açıklama yapmaya gerek var mı? Kullanıcı isimlerini buluyor.
"index of" / lck
+intext:"webalizer" +intext:"Total Usernames" +intext:"Usage Statistics for"
bash_history files
filetype
f inurlroftpd.conf -samplefiletype:log username putty
filetype:reg reg +intext:"internet account manager
filetype:reg reg HKEY_CURRENT_USER username
index.of perform.ini
inurl:admin filetype:asp inurl:userlist
inurl:admin inurl:userlist
inurlhp inurl:hlstats intext:"Server Username"
sh_history files
Şifreler-En önemli ayrıntılar...
allinurl: admin mdb
auth_user_file.txt
config.php
eggdrop filetype:user user
etc (index.of)
filetype:cfm "cfapplication name" password
filetype
f slapd.conffiletype:dat "password.dat"
filetype:inc intext:mysql_connect
filetype:log inurl:"password.log"
filetypeem intextrivate
filetyperoperties inurl:db intextassword
filetype:reg reg +intext:"defaultusername" +intext:"defaultpassword"
filetype:reg reg HKEY_CURRENT_USER SSHHOSTKEYS
filetype:url +inurl:"ftp://" +inurl:";@"
filetype:xls username password email
htpasswd
htpasswd / htgroup
htpasswd / htpasswd.bak
intitle:"index of" intext
nect.incintitle:"index of" intext:globals.inc
intitle:index.of administrators.pwd
intitle:Index.of etc shadow
intitle:index.of secring.pgp
inurl:"wvdial.conf" intext:"password"
inurl
fig.php dbuname dbpassinurlerform filetype:ini
inurl:vtund.conf intextass -cvs
master.passwd
mysql history files
passlist
passlist.txt (a better way)
passwd
passwd / etc (reliable)
people.lst
PGP Keys
pwd.db
spwd.db / passwd
trillian.ini
İlginç bilgiler: kullanıcı ismi ve şifre yok ama site hakkında önemli bilgilere ulaşabilirsiniz
"#mysql dump" filetype:sql
"generated by wwwstat"
"Host Vulnerability Summary Report"
"HTTP_FROM=googlebot" googlebot.com "Server_Software="
"Index of" / "chat/logs"
"Mecury Version" "Infastructure Group"
"Most Submitted Forms and Scripts" "this section"
"Network Vulnerability Assessment Report"
"not for distribution" confidential
"phpMyAdmin" "running on" inurl:"main.php"
"produced by getstats"
"Request Details" "Control Tree" "Server Variables"
"robots.txt" "Disallow:" filetype:txt
"robots.txt" "Disallow:" filetype:txt
"Running in Child mode"
"Thank you for your order" +receipt
"This is a Shareaza Node"
"This report was generated by WebLog"
AIM buddy lists
allinurl:/examples/jsp/snp/snoop.jsp
allinurl:servlet/SnoopServlet
cgiirc.conf
cgiirc.conf
filetype:blt blt +intext:screenname
filetype
f inurl:firewall -intitle:cvsfiletype:eml eml +intext:"Subject" +intext:"From" +intext:"To"
filetype:lic lic intext:key
filetype:log access.log -CVS
filetype:mbx mbx intext:Subject
filetype:wab wab
haccess.ctl
ICQ chat logs, please...
iletype:log cron.log
intext:"Tobias Oetiker" "traffic analysis"
intitle:"Big Sister" +"OK Attention Trouble"
intitle:"index of" mysql.conf OR mysql_config
intitle:"statistics of" "advanced web statistics"
intitle:"System Statistics" +"System and Network Information Center"
intitle:"Usage Statistics for" "Generated by Webalizer"
intitle:"wbem" compaq login
intitle:admin intitle:login
intitle:index.of "Apache" "server at"
intitle:index.of cleanup.log
intitle:index.of dead.letter
intitle:index.of inbox
intitle:index.of inbox dbx
intitle:index.of ws_ftp.ini
intitle:intranet inurl:intranet +intext:"phone"
inurl:"/cricket/grapher.cgi"
inurl:"cacti" +inurl:"graph_view.php" +"Settings Tree View" -cvs -RPM
inurl:"newsletter/admin/"
inurl:"newsletter/admin/" intitle:"newsletter admin"
inurl:"smb.conf" intext:"workgroup" filetype
f confinurl:admin filetype:xls
inurl:admin intitle:login
inurl:cgi-bin/printenv
inurl:changepassword.asp
inurl:fcgi-bin/echo
inurl:main.php phpMyAdmin
inurl:main.php Welcome to phpMyAdmin
inurlerl/printenv
inurlhp.ini filetype:ini
inurl:server-info "Apache Server Information"
inurl:server-status "apache"
inurl:tdbin
inurl:vbstats.php "page generated"
ipsec.conf
ipsec.secrets
ipsec.secrets
mt-db-pass.cgi files
mystuff.xml - Trillian data files
"phpinfo.php" -manual
"# phpMyAdmin MySQL-Dump" "INSERT INTO" -"the"
intitle:index.of robots.txt
site:edu admin grades
"# Dumping data for table"
"cacheserverreport for" "This analysis was produced by calamaris"
+htpasswd +WS_FTP.LOG filetype:log
intitle:admin intitle:login
Login Portalları-sisteme giriş kapıları
"please log in"
"VNC Desktop" inurl:5800
"Web Control Panel" "Enter your password here"
allinurl:"exchange/logon.asp"
intitle:"ColdFusion Administrator Login"
intitle:"Dell Remote Access Controller"
intitle:"MikroTik RouterOS Managing Webpage"
intitle:"Remote Desktop Web Connection" inurl:tsweb
inurl:":10000" intext:webmin
inurl:/admin/login.asp
inurl:/Citrix/Nfuse17/
inurl:citrix/****framexp/default/login.asp
inurl:login filetype:swf swf
inurl:login.asp
inurl:login.cfm
inurl:names.nsf?opendatabase
url:webadmin" filetype:nsf
Network bilgileri, firewall log’ları, IDS kayıtları
"Network Host Assessment Report" "Internet Scanner"
"SnortSnarf alert page"
"This file was generated by Nessus"
"This report lists" "identified by Internet Scanner"
filetypedf "Assessment Report" nessus
filetype:vsd vsd network -samples -examples
inurlhpSysInfo/ "created by phpsysinfo"
Önemli Klasörler
"index of cgi-bin"
"index of" inurl:recycler
"Welcome to phpMyAdmin" " Create new database"
index.of.password
intitle:"Index of c:Windows"
intitle:"Index of" cfide
intitle:"index.of.personal"
intitle:intranet inurl:intranet +intext:"human resources"
inurl:/pls/sample/admin_/help/
inurl:/tmp
inurl:backup intitle:index.of inurl:admin
inurl:j2ee/examples/jsp
inurljspdemos
"Index of /backup"
index.of.private
index.of.protected
index.of.secret
index.of.secure
index.of.winnt
Güvenlik Açığı Olan Sunucular
"Select a database to view" intitle:"filemaker pro"
"Welcome to Intranet"
"Welcome to PHP-Nuke" congratulations
"YaBB SE Dev Team"
allinurl:install/install.php
allinurl:intranet admin
Gallery in configuration mode
Hassan Consulting’s Shopping Cart Version 1.18
intitle:"Gateway Configuration Menu"
intitle:"osCommerce" inurl:admin filetypehp
intitle:"Remote Desktop Web Connection"
intitle:"Samba Web Administration Tool" intext:"Help Workgroup"
intitle:"Terminal Services Web Connection"
inurl:footer.inc.php
inurl:info.inc.php
inurl:ManyServers.htm
inurlls/admin_/gateway.htm
inurl:search.php vbulletin
Web sunucularını öğrenmek
"seeing this instead" intitle:"test page for apache"
aboutprinter.shtml (More Xerox printers on the web!)
allintitle:Netscape FastTrack Server Home Page
intitle:"Apache HTTP Server" intitle:"documentation"
intitle:"Welcome to IIS 4.0"
index_i.shtml Ready (Xerox printers on the web!)
intitle:"300 multiple choices"
intitle:"Test Page for Apache"
intitle:"Test Page for Apache" "It Worked!"
intitle:"Test Page for Apache" "It Worked!" "on this web"
intitle:Snap.Server inurl:Func=
inurl:domcfg.nsf
inurl:tech-support inurl:show Cisco
Label: Hacking
1 Komentar:
Pada 17 Januari, 2008 ,
Anonim mengatakan...
waduh pak gak ngerti neh maksud dari kode/script ini apa...please dijelasin y? ditunggu
Posting Komentar
Berlangganan Posting Komentar [Atom]
<< Beranda